Merge master into staging-next

2026-10-03 13:30:36 +00:00 · 2026-10-02 12:14:51 +00:00
parent 48292c23e1 c8b515c68b
commit adfb7fc9ba
84 changed files with 1201 additions and 682 deletions
--- a/ci/README.md
+++ b/ci/README.md
@@ -48,7 +48,7 @@ To ensure security and a focused utility, the bot adheres to specific limitation
  - approved by a [committer][@NixOS/nixpkgs-committers].
  - backported via label.
  - opened by a [committer][@NixOS/nixpkgs-committers].
-  - opened by [@r-ryantm](https://nix-community.github.io/nixpkgs-update/r-ryantm/).
+  - opened by [@r-ryantm](https://nixos.github.io/nixpkgs-update/r-ryantm/).
 - The user attempting to merge is a member of [@NixOS/nixpkgs-maintainers].
 - The user attempting to merge is a maintainer of all packages touched by the PR.
 - No [committer][@NixOS/nixpkgs-committers] has an outstanding "changes requested" review.
--- a/ci/github-script/merge.js
+++ b/ci/github-script/merge.js
@@ -71,7 +71,7 @@ function runChecklist({
        pull_request.head.ref.startsWith('backport-'),
      'Opened by a [committer](https://github.com/orgs/NixOS/teams/nixpkgs-committers).':
        committers.has(pull_request.user.id),
-      'Opened by [@r-ryantm](https://nix-community.github.io/nixpkgs-update/r-ryantm/).':
+      'Opened by [@r-ryantm](https://nixos.github.io/nixpkgs-update/r-ryantm/).':
        pull_request.user.login === 'r-ryantm',
    },
    'PR is not a draft': !pull_request.draft,
--- a/nixos/tests/budgie.nix
+++ b/nixos/tests/budgie.nix
@@ -67,6 +67,9 @@
          machine.succeed(f"{cmd} | grep 'SSH_AUTH_SOCK' | grep 'gcr'")

      with subtest("Open run dialog"):
+          machine.wait_for_console_text("Monitoring /home/${user.name}/.config/budgie-desktop/labwc/environment for keyboard layout changes")
+          machine.wait_for_console_text("Published CurrentLayout=us")
+          machine.sleep(2)
          machine.send_key("alt-f2")
          machine.wait_until_succeeds("pgrep -xf budgie-run-dialog")
          machine.sleep(2)
@@ -76,7 +79,7 @@
      with subtest("Open Budgie Control Center"):
          machine.succeed("su - ${user.name} -c '${env} budgie-control-center >&2 &'")
          machine.wait_until_succeeds("su - ${user.name} -c '${env} wlrctl toplevel list | grep org.buddiesofbudgie.ControlCenter'")
-          machine.wait_for_text("Network|Ethernet|Control|Connected")
+          machine.wait_for_text(r"(Network|Introduction|Privacy)")

      with subtest("Open GNOME terminal"):
          machine.succeed("su - ${user.name} -c '${env} gnome-terminal >&2 &'")
--- a/nixos/tests/signal-desktop.nix
+++ b/nixos/tests/signal-desktop.nix
@@ -69,7 +69,7 @@ in
      )
      # Only SQLCipher should be able to read the encrypted DB:
      machine.fail(
-          "su - alice -c 'sqlite3 ~/.config/Signal/sql/db.sqlite .tables'"
+          "su - alice -c 'sqlite3 ~/.config/Signal/sql/db.sqlite \"SELECT count(*) FROM sqlite_master\"'"
      )
      print(machine.succeed(
          "su - alice -c 'sqlcipher ~/.config/Signal/sql/db.sqlite'"
--- a/nixos/tests/zoom-us.nix
+++ b/nixos/tests/zoom-us.nix
@@ -10,11 +10,38 @@
    };

  testScript = ''
+    import time
+
    machine.succeed("which zoom")  # fail early if this is missing
    machine.wait_for_x()
-    machine.execute("zoom >&2 &")
-    machine.wait_for_window("Zoom Workplace")
+    machine.execute("zoom > /tmp/zoom-us.log 2>&1 & echo $! > /tmp/zoom-us.pid")
+
+    def has_zoom_window():
+        return any("Zoom Workplace" in name for name in machine.get_window_names())
+
+    # Zoom should open its main window shortly after startup. Poll for it, but
+    # stop as soon as the launcher process exits (for example because of a
+    # missing shared library) instead of waiting for the whole window timeout.
+    deadline = time.time() + 120
+    while not has_zoom_window():
+        if machine.execute("kill -0 $(cat /tmp/zoom-us.pid)")[0] != 0:
+            raise Exception(
+                "zoom exited before opening its main window:\n"
+                + machine.execute("cat /tmp/zoom-us.log")[1]
+            )
+        if time.time() > deadline:
+            raise Exception(
+                "timed out waiting for the Zoom Workplace window:\n"
+                + machine.execute("cat /tmp/zoom-us.log")[1]
+            )
+        time.sleep(1)
+
+    # The window should stay open for a while instead of crashing on startup.
    machine.sleep(20)
-    machine.wait_for_window("Zoom Workplace")
+    if not has_zoom_window():
+        raise Exception(
+            "the Zoom Workplace window disappeared shortly after startup:\n"
+            + machine.execute("cat /tmp/zoom-us.log")[1]
+        )
  '';
 }
--- a/pkgs/README.md
+++ b/pkgs/README.md
@@ -912,9 +912,9 @@ stdenv.mkDerivation {
 ## Automatic package updates
 [automatic-package-updates]: #automatic-package-updates

-The [community bot `r-ryantm`](https://nix-community.org/update-bot/), periodically tries to update all packages in Nixpkgs.
-It runs the program [`nixpkgs-update`](https://nix-community.github.io/nixpkgs-update/) which finds new versions of packages, modifies the relevant files, and opens a Nixpkgs PR.
-`nixpkgs-update` has a specific set of capabilities of finding new versions for a package, and updating Nix files accordingly (see their [FAQ](https://nix-community.github.io/nixpkgs-update/nixpkgs-maintainer-faq/)).
+The [community bot `r-ryantm`](https://github.com/NixOS/infra/blob/main/non-critical-infra/modules/nixpkgs-update/README.md), periodically tries to update all packages in Nixpkgs.
+It runs the program [`nixpkgs-update`](https://nixos.github.io/nixpkgs-update/) which finds new versions of packages, modifies the relevant files, and opens a Nixpkgs PR.
+`nixpkgs-update` has a specific set of capabilities of finding new versions for a package, and updating Nix files accordingly (see their [FAQ](https://nixos.github.io/nixpkgs-update/nixpkgs-maintainer-faq/)).
 However, setting a `passthru.updateScript` for a package, sets an explicit update procedure for `nixpkgs-update`, that can find the latest version more reliably than `nixpkgs-update`, and modify the necessary files more correctly.

 ### Valid `passthru.updateScript` values
--- a/pkgs/applications/editors/eclipse/default.nix
+++ b/pkgs/applications/editors/eclipse/default.nix
@@ -21,8 +21,7 @@
 }:

 # ./update.sh fully automates updating for each quarterly release.  you can run
-# it manually, or wait for https://nix-community.github.io/nixpkgs-update/ to do
-# so.
+# it manually, or wait for nixpkgs-update to do so.
 #
 # then, to test (on x86_64):
 # for e in $(cat pkgs/applications/editors/eclipse/eclipses.json | jq '.eclipses | keys | .[] | ascii_downcase' -r); do for s in pkgs pkgsCross.aarch64-multiplatform; do echo; echo $s $e; nix-build -A ${s}.eclipses.eclipse-${e} -o eclipse-${s}-${e}; done; done
--- a/pkgs/by-name/az/azure-cli/extensions-manual.nix
+++ b/pkgs/by-name/az/azure-cli/extensions-manual.nix
@@ -69,9 +69,9 @@

  application-insights = mkAzExtension rec {
    pname = "application-insights";
-    version = "2.0.0b1";
+    version = "2.0.0b2";
    url = "https://azcliprod.blob.core.windows.net/cli-extensions/application_insights-${version}-py2.py3-none-any.whl";
-    hash = "sha256-4akS+zbaKxFrs0x0uKP/xX28WyK5KLduOkgZaBYeANM=";
+    hash = "sha256-CpDStul4wj9GJ5VW5uQIX53NTrsAMv6cVGjOGkDERkk=";
    description = "Support for managing Application Insights components and querying metrics, events, and logs from such components";
    pythonRelaxDeps = [ "isodate" ];
    propagatedBuildInputs = with python3Packages; [ isodate ];
--- a/pkgs/by-name/br/broot/package.nix
+++ b/pkgs/by-name/br/broot/package.nix
@@ -16,16 +16,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "broot";
-  version = "1.60.1";
+  version = "1.60.2";

  src = fetchFromGitHub {
    owner = "Canop";
    repo = "broot";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-l+NR7i1vo0W5oDuPvcRECdhB7TQTwd+aWbRJwbNLuSI=";
+    hash = "sha256-q6dzE3sdNyVbXTZuXFwn67T1Tau+ChctlIlOm2Xpt7A=";
  };

-  cargoHash = "sha256-zAOvbJkQF5jc16/txTUnVy8GcpKvfFbRSEc0EDWbCzc=";
+  cargoHash = "sha256-R4KNPRB4cfa1zeDASkJJUxQ/X7gMXmshJDjQzofV18c=";

  nativeBuildInputs = [
    installShellFiles
--- a/pkgs/by-name/bu/budgie-desktop-services/package.nix
+++ b/pkgs/by-name/bu/budgie-desktop-services/package.nix
@@ -11,14 +11,14 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "budgie-desktop-services";
-  version = "1.0.2";
+  version = "1.0.3";

  src = fetchFromGitea {
    domain = "forge.moderndesktop.dev";
    owner = "BuddiesOfBudgie";
    repo = "budgie-desktop-services";
    tag = finalAttrs.version;
-    hash = "sha256-YOa2pUePp33d1xKF7HrBX2EkjEQsRmzoiJMq72fl3CE=";
+    hash = "sha256-k3gpDQ61GZT1DW/Otk/JBj30it9Ogp8OjL5LZVKDL7Q=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/bu/budgie-desktop-view/package.nix
+++ b/pkgs/by-name/bu/budgie-desktop-view/package.nix
@@ -18,13 +18,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "budgie-desktop-view";
-  version = "10.10.2";
+  version = "10.10.3";

  src = fetchFromGitHub {
    owner = "BuddiesOfBudgie";
    repo = "budgie-desktop-view";
    rev = "v${finalAttrs.version}";
-    hash = "sha256-XwfNbrK9+FCYtO2tiz5TfHsJmctFbcEaUORiVs/aynE=";
+    hash = "sha256-DRN2a20EdfCFeSLE7tMfXH7mgwY5FayhkLWSxThPSFY=";
  };

  nativeBuildInputs = [
@@ -44,8 +44,6 @@ stdenv.mkDerivation (finalAttrs: {
    libxfce4windowing
  ];

-  mesonFlags = [ (lib.mesonBool "werror" false) ];
-
  passthru = {
    updateScript = nix-update-script { };
  };
--- a/pkgs/by-name/bu/budgie-desktop/package.nix
+++ b/pkgs/by-name/bu/budgie-desktop/package.nix
@@ -15,16 +15,13 @@
  gtk-doc,
  gtk3,
  gtk-layer-shell,
-  ibus,
-  intltool,
  libcanberra-gtk3,
  libgee,
+  libgtop,
  libnotify,
  libpeas2,
  libpulseaudio,
  libuuid,
-  libwacom,
-  libwnck,
  libxfce4windowing,
  meson,
  mutter,
@@ -53,14 +50,14 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "budgie-desktop";
-  version = "10.10.2";
+  version = "10.10.3";

  src = fetchFromGitHub {
    owner = "BuddiesOfBudgie";
    repo = "budgie-desktop";
    tag = "v${finalAttrs.version}";
    fetchSubmodules = true;
-    hash = "sha256-Eaq7/LY65HpyPRfR57FWDPqkVqBbymlHHQHFUvxER20=";
+    hash = "sha256-WEUFB3Q3RQZfsZd/xUn6qmGXPM/dR3sUe6pBnJG3vIk=";
  };

  outputs = [
@@ -77,10 +74,10 @@ stdenv.mkDerivation (finalAttrs: {
    docbook-xsl-nons
    gobject-introspection
    gtk-doc
-    intltool
    meson
    ninja
    pkg-config
+    python3
    sassc
    vala
    validatePkgConfig
@@ -97,14 +94,12 @@ stdenv.mkDerivation (finalAttrs: {
    gst_all_1.gst-plugins-base
    gtk3
    gtk-layer-shell
-    ibus
    libcanberra-gtk3
    libgee
+    libgtop
    libnotify
    libpulseaudio
    libuuid
-    libwacom
-    libwnck
    libxfce4windowing
    mutter # org.gnome.mutter.keybindings
    pythonEnv
@@ -117,19 +112,17 @@ stdenv.mkDerivation (finalAttrs: {
  ];

  mesonFlags = [
+    "-Dbudgie-session-libexecdir=${budgie-session}/libexec"
    "-Dgsd-libexecdir=${gnome-settings-daemon}/libexec"
+    "-Dxdp-libexecdir=${xdg-desktop-portal}/libexec"
    "-Dwith-runtime-dependencies=false"
  ];

  postPatch = ''
-    substituteInPlace src/session/budgie-desktop.in \
-      --replace-fail "@bindir@/org.buddiesofbudgie.Services" "${lib.getExe budgie-desktop-services}" \
-      --replace-fail "@libexecdirroot@/xdg-desktop-portal" "${xdg-desktop-portal}/libexec/xdg-desktop-portal" \
-      --replace-fail "@gsd_libexecdir@/budgie-session-compositor-ready" "${budgie-session}/libexec/budgie-session-compositor-ready"
+    patchShebangs po/listUiFiles.py

-    chmod +x src/bridges/labwc/labwc_bridge.py
-    substituteInPlace src/bridges/labwc/org.buddiesofbudgie.labwc-bridge.desktop.in \
-      --replace-fail "Exec=python3 @libexecdir@/labwc_bridge.py" "Exec=@libexecdir@/labwc_bridge.py"
+    substituteInPlace src/session/budgie-desktop.in \
+      --replace-fail "@bindir@/org.buddiesofbudgie.Services" "${lib.getExe budgie-desktop-services}"
  '';

  passthru = {
--- a/pkgs/by-name/bu/budgie-gsettings-overrides/package.nix
+++ b/pkgs/by-name/bu/budgie-gsettings-overrides/package.nix
@@ -40,7 +40,8 @@ let

    [com.solus-project.budgie-panel:Budgie]
    dark-theme=false
-    builtin-theme=false
+    # See https://github.com/vinceliuice/Qogir-theme/issues/364.
+    builtin-theme=true

    [com.solus-project.icon-tasklist:Budgie]
    pinned-launchers=["nemo.desktop", "firefox.desktop", "vlc.desktop"]
--- a/pkgs/by-name/cl/cline/package.nix
+++ b/pkgs/by-name/cl/cline/package.nix
@@ -0,0 +1,200 @@
+{
+  lib,
+  stdenvNoCC,
+  bun,
+  fetchFromGitHub,
+  inetutils,
+  makeBinaryWrapper,
+  nodejs,
+  nix-update-script,
+  ripgrep,
+  gitMinimal,
+  xdg-utils,
+  versionCheckHook,
+  writableTmpDirAsHomeHook,
+}:
+let
+
+  nodeModules =
+    finalAttrs:
+    stdenvNoCC.mkDerivation {
+      pname = "${finalAttrs.pname}-node_modules";
+      inherit (finalAttrs) version src;
+
+      __structuredAttrs = true;
+      strictDeps = true;
+
+      nativeBuildInputs = [
+        bun
+        writableTmpDirAsHomeHook
+      ];
+
+      dontConfigure = true;
+
+      impureEnvVars = lib.fetchers.proxyImpureEnvVars ++ [
+        "GIT_PROXY_COMMAND"
+        "SOCKS_SERVER"
+      ];
+
+      buildPhase = ''
+        runHook preBuild
+
+        export BUN_INSTALL_CACHE_DIR=$(mktemp -d)
+
+        # Only fetch the cline CLI deps
+        bun install \
+          --frozen-lockfile \
+          --ignore-scripts \
+          --no-progress \
+          --os="*" \
+          --cpu="*" \
+          --filter ./ \
+          --filter './sdk/packages/*' \
+          --filter ./apps/cli \
+          --filter ./apps/cline-hub \
+          --filter ./apps/cline-hub/src/webview
+
+        runHook postBuild
+      '';
+
+      installPhase = ''
+        runHook preInstall
+
+        mkdir -p $out
+        find . -type d -name node_modules -exec cp -R --parents {} $out \;
+
+        runHook postInstall
+      '';
+
+      # Required, else the fixed-output derivation ends up referencing store
+      # paths from the source it was built from.
+      dontFixup = true;
+
+      outputHash = "sha256-cDZ7Ad87n/IlVqOqRTrZjaPUMilHiP7g4M0/K5tRoyM=";
+      outputHashAlgo = "sha256";
+      outputHashMode = "recursive";
+    };
+
+  # Upstream's build script names its output directory after the platform it
+  # compiled for, which with --single is always the build host.
+  targetDirName =
+    (if stdenvNoCC.hostPlatform.isDarwin then "cli-darwin-" else "cli-linux-")
+    + (if stdenvNoCC.hostPlatform.isx86_64 then "x64" else "arm64");
+in
+stdenvNoCC.mkDerivation (finalAttrs: {
+  pname = "cline";
+  version = "3.0.65";
+
+  __structuredAttrs = true;
+  strictDeps = true;
+
+  src = fetchFromGitHub {
+    owner = "cline";
+    repo = "cline";
+    tag = "cli-v${finalAttrs.version}";
+    hash = "sha256-9Mw9hFPVaAE833vfwqYDIHDa8bjIu+xUwQ5p7l7Fdm8=";
+  };
+
+  node_modules = nodeModules finalAttrs;
+
+  nativeBuildInputs = [
+    bun
+    makeBinaryWrapper
+    # tsc has a `#!/usr/bin/env node` shebang in its shims
+    nodejs
+  ];
+
+  configurePhase = ''
+    runHook preConfigure
+
+    cp -R ${finalAttrs.node_modules}/. .
+
+    # The store hands over a read-only tree, but the build writes into it:
+    # `tsc -b` emits .tsbuildinfo files under node_modules/.tmp, and Vite
+    # caches next to the packages it resolves.
+    find . -type d -name node_modules -prune -exec chmod -R u+w {} +
+
+    patchShebangs node_modules apps sdk
+
+    runHook postConfigure
+  '';
+
+  buildPhase = ''
+    runHook preBuild
+
+    # Bundle everything into a standalone executable
+    pushd apps/cli > /dev/null
+    bun script/build.ts --single
+    popd > /dev/null
+
+    runHook postBuild
+  '';
+
+  installPhase = ''
+    runHook preInstall
+
+    dist="apps/cli/dist/${targetDirName}"
+
+    mkdir -p $out/libexec/cline
+    cp -R "$dist/." $out/libexec/cline/
+
+    makeBinaryWrapper $out/libexec/cline/bin/cline $out/bin/cline \
+      --set CLINE_NO_AUTO_UPDATE 1 \
+      --prefix PATH : ${
+        lib.makeBinPath (
+          [
+            # agent's file search tool is backed by rg
+            ripgrep
+            # Checkpoints, worktrees, repo status and plugin installs all
+            # call out to git
+            gitMinimal
+          ]
+          ++ lib.optionals stdenvNoCC.hostPlatform.isLinux [
+            # xdg-open, to put the dashboard in a browser.
+            xdg-utils
+          ]
+        )
+      }
+
+    runHook postInstall
+  '';
+
+  # Bun-compiled executables do not survive stripping.
+  dontStrip = true;
+
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [
+    versionCheckHook
+    writableTmpDirAsHomeHook
+    inetutils
+  ];
+  versionCheckProgramArg = "--version";
+  versionCheckKeepEnvironment = "HOME PATH";
+
+  passthru.updateScript = nix-update-script {
+    extraArgs = [
+      # CLI releases are tagged with `cli-v` prefix, e.g. `cli-v1.2.3`
+      "--version-regex"
+      "^cli-v"
+      # Recompute FOD hash of the node_modules derivation as well
+      "--subpackage"
+      "node_modules"
+    ];
+  };
+
+  meta = {
+    description = "Autonomous coding agent CLI for the terminal";
+    longDescription = ''
+      Cline is an open-source autonomous AI coding agent that runs inside
+      your editor or terminal. It reads files, writes code, runs terminal
+      commands, and fixes errors while keeping you in control through structured
+      plan-and-act steps.
+    '';
+    homepage = "https://cline.bot";
+    changelog = "https://github.com/cline/cline/blob/main/apps/cli/CHANGELOG.md";
+    license = lib.licenses.asl20;
+    mainProgram = "cline";
+    maintainers = with lib.maintainers; [ johnrtitor ];
+    inherit (bun.meta) platforms;
+  };
+})
--- a/pkgs/by-name/dd/ddccontrol-db/package.nix
+++ b/pkgs/by-name/dd/ddccontrol-db/package.nix
@@ -5,18 +5,19 @@
  automake,
  libtool,
  intltool,
+  ddccontrol-dbgen,
  fetchFromGitHub,
 }:

 stdenv.mkDerivation (finalAttrs: {
  pname = "ddccontrol-db";
-  version = "20260922";
+  version = "20260928";

  src = fetchFromGitHub {
    owner = "ddccontrol";
    repo = "ddccontrol-db";
    tag = finalAttrs.version;
-    sha256 = "sha256-i5d/zvJVZpQ9EUXPbiT398hdfjC6jbES0UIM0Un3BQY=";
+    sha256 = "sha256-JpHarxvL147ATcvYLR1nxfMY24Pp2TYJlEXG9L1vqSo=";
  };

  nativeBuildInputs = [
@@ -24,6 +25,7 @@ stdenv.mkDerivation (finalAttrs: {
    automake
    intltool
    libtool
+    ddccontrol-dbgen
  ];

  preConfigure = ''
--- a/pkgs/by-name/dd/ddccontrol-dbgen/package.nix
+++ b/pkgs/by-name/dd/ddccontrol-dbgen/package.nix
@@ -0,0 +1,20 @@
+{
+  rustPlatform,
+  ddccontrol,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "ddccontrol-dbgen";
+  inherit (ddccontrol)
+    version
+    src
+    cargoDeps
+    meta
+    ;
+  __structuredAttrs = true;
+
+  cargoBuildFlags = [
+    "--package"
+    "ddccontrol-dbgen"
+  ];
+})
--- a/pkgs/by-name/dd/ddccontrol/package.nix
+++ b/pkgs/by-name/dd/ddccontrol/package.nix
@@ -20,18 +20,18 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "ddccontrol";
-  version = "3.2.0";
+  version = "3.4.0";

  src = fetchFromGitHub {
    owner = "ddccontrol";
    repo = "ddccontrol";
    tag = finalAttrs.version;
-    sha256 = "sha256-8VqnmWLXt6rXapAqvzvtDQ9XjQ7H6s7pLqPhQ6Zflc4=";
+    sha256 = "sha256-1rCO99n89N2dbUU5vfTFyCrLC18iBF3ShcCjVjTz2to=";
  };

  cargoDeps = rustPlatform.fetchCargoVendor {
    inherit (finalAttrs) pname version src;
-    hash = "sha256-UN308Tt9LCRLBSswem06UupjdIFntt6SqpTxteY5O78=";
+    hash = "sha256-eLRK1fNl/vCs7pR78BglN87/axh8G/gYvZv0dQzzy8c=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/de/degit/package.nix
+++ b/pkgs/by-name/de/degit/package.nix
@@ -1,28 +1,138 @@
 {
  lib,
-  buildNpmPackage,
+  stdenv,
  fetchFromGitHub,
+  bun,
+  makeWrapper,
+  nodejs,
+  writableTmpDirAsHomeHook,
 }:

-buildNpmPackage rec {
+stdenv.mkDerivation (finalAttrs: {
  pname = "degit";
-  version = "2.8.4";
+  version = "3.10.0";
+  __structuredAttrs = true;
+  strictDeps = true;

  src = fetchFromGitHub {
    owner = "Rich-Harris";
    repo = "degit";
-    rev = "v${version}";
-    hash = "sha256-Vw/gtmKywi5faSCs7Wek80nmnqcPHXlQarD5qMwlsQE=";
+    rev = "v${finalAttrs.version}";
+    hash = "sha256-Oilw6PWxWTBTcTFeMAfLUsixMmZtJ6S3cjR/if0uCtc=";
  };

-  npmDepsHash = "sha256-42cM31C2c1Gr7HWOowMUTEUEyL0mGnyl5fyQECcz1Sw=";
+  nativeBuildInputs = [
+    bun
+    makeWrapper
+    nodejs
+    writableTmpDirAsHomeHook
+  ];
+
+  configurePhase = ''
+    runHook preConfigure
+
+    cp -R ${finalAttrs.passthru.node_modules}/. .
+    patchShebangs node_modules
+
+    runHook postConfigure
+  '';
+
+  buildPhase = ''
+    runHook preBuild
+
+    bun run build
+
+    runHook postBuild
+  '';
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out/{bin,lib/degit}
+    cp -r assets degit dist node_modules package.json LICENSE.md $out/lib/degit/
+
+    # NOTE:
+    # We're silencing warnings because of DEP0169 in `degit`, which is present
+    # both in the main project and its dependencies, namely `isomorphic-git`,
+    # which in turn depends on `simple-get`, which uses the deprecated API.
+    #
+    # For now, let's just silence the warning so it doesn't annoy users.
+    #
+    # Also see:
+    # - https://nodejs.org/api/deprecations.html#dep0169-insecure-urlparse
+    # - https://nodejs.org/api/url.html#the-whatwg-url-api
+    makeWrapper ${nodejs}/bin/node $out/bin/degit \
+      --add-flags "--no-deprecation" \
+      --add-flags "$out/lib/degit/degit"
+
+    runHook postInstall
+  '';
+
+  passthru = {
+    # Adapted from: pkgs/by-name/an/anytype/package.nix
+    node_modules = stdenv.mkDerivation {
+      pname = "${finalAttrs.pname}-node_modules";
+      inherit (finalAttrs) version src;
+
+      __structuredAttrs = true;
+      strictDeps = true;
+
+      impureEnvVars = lib.fetchers.proxyImpureEnvVars ++ [
+        "GIT_PROXY_COMMAND"
+        "SOCKS_SERVER"
+      ];
+
+      nativeBuildInputs = [
+        bun
+        writableTmpDirAsHomeHook
+      ];
+
+      dontConfigure = true;
+
+      buildPhase = ''
+        runHook preBuild
+
+        export BUN_INSTALL_CACHE_DIR=$(mktemp -d)
+        # https://bun.com/docs/pm/cli/install#configuring-with-environment-variables
+
+        # Bun always tries to use the fastest available installation method for the target platform. On macOS, that’s clonefile and on Linux, that’s hardlink.
+        bun install \
+          --backend=copyfile \
+          --cpu="*" \
+          --frozen-lockfile \
+          --ignore-scripts \
+          --no-progress \
+          --os="*"
+
+        runHook postBuild
+      '';
+
+      installPhase = ''
+        runHook preInstall
+
+        mkdir -p $out
+        find . -type d -name node_modules -exec cp -R --parents {} $out \;
+
+        runHook postInstall
+      '';
+
+      dontFixup = true;
+
+      outputHash = "sha256-jUFea7eSY0AYtwPGUUXxoZQb6zZpmiaowqeVibck884=";
+      outputHashAlgo = "sha256";
+      outputHashMode = "recursive";
+    };
+  };

  meta = {
-    changelog = "https://github.com/Rich-Harris/degit/blob/${src.rev}/CHANGELOG.md";
+    changelog = "https://github.com/Rich-Harris/degit/blob/${finalAttrs.src.rev}/docs/CHANGELOG.md";
    description = "Make copies of git repositories";
    homepage = "https://github.com/Rich-Harris/degit";
    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ kidonng ];
+    maintainers = with lib.maintainers; [
+      eljamm
+      kidonng
+    ];
    mainProgram = "degit";
  };
-}
+})
--- a/pkgs/by-name/ej/ejabberd/package.nix
+++ b/pkgs/by-name/ej/ejabberd/package.nix
@@ -144,7 +144,7 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "ejabberd";
-  version = "26.07";
+  version = "26.09";

  nativeBuildInputs = [
    makeWrapper
@@ -184,7 +184,7 @@ stdenv.mkDerivation (finalAttrs: {
    owner = "processone";
    repo = "ejabberd";
    tag = finalAttrs.version;
-    hash = "sha256-YCcRXbhlIYV0cP4RLTknYnfSpkknLenvWOYs9kt7m3c=";
+    hash = "sha256-wSrzb+UOqCFp/vk+Q8spukKBzRqquIPt6fkmyVFAz0w=";
  };

  passthru.tests = {
--- a/pkgs/by-name/ej/ejabberd/rebar-deps.nix
+++ b/pkgs/by-name/ej/ejabberd/rebar-deps.nix
@@ -24,11 +24,11 @@ let
    };
    xmpp = builder {
      name = "xmpp";
-      version = "1.13.4";
+      version = "1.13.5";
      src = fetchHex {
        pkg = "xmpp";
-        version = "1.13.4";
-        sha256 = "sha256-SzH/TjBtpKkwzgZ1/tTzw6+D9rOalgnootR0ffvq4NQ=";
+        version = "1.13.5";
+        sha256 = "sha256-qpYyd7qpa3dZ4JUt2TfxC8LUT+EEPKAz3oATFMr6vF0=";
      };
      beamDeps = [
        ezlib
@@ -41,11 +41,11 @@ let
    };
    stun = builder {
      name = "stun";
-      version = "1.2.22";
+      version = "1.2.23";
      src = fetchHex {
        pkg = "stun";
-        version = "1.2.22";
-        sha256 = "sha256-NAi0sR1SN6CI9TsmCgaUDDCxb0pICUiS1qkgThZDGIo=";
+        version = "1.2.23";
+        sha256 = "sha256-2KGp8/ZUvFEwRoQDtmyqXcJJ6oWEiB3FQELrwib84kk=";
      };
      beamDeps = [
        fast_tls
@@ -188,11 +188,11 @@ let
    };
    fast_xml = builder {
      name = "fast_xml";
-      version = "1.1.60";
+      version = "1.1.61";
      src = fetchHex {
        pkg = "fast_xml";
-        version = "1.1.60";
-        sha256 = "sha256-z54nSd1HIEcCy3oEq1BFZC+gCW/fyc/y6cptPyq9N8U=";
+        version = "1.1.61";
+        sha256 = "sha256-C9GFUP0dJRYFlkJNnAHAM6znSVviWZZ5ELxTNiIrVJk=";
      };
      beamDeps = [ p1_utils ];
    };
@@ -218,11 +218,11 @@ let
    };
    esip = builder {
      name = "esip";
-      version = "1.0.60";
+      version = "1.0.61";
      src = fetchHex {
        pkg = "esip";
-        version = "1.0.60";
-        sha256 = "sha256-BgTL1LvI2hWSwAgwz+MGIM5PZlurEZnRSjtF+v0DFE8=";
+        version = "1.0.61";
+        sha256 = "sha256-9SBZWihyCUNDYQGL9DBED6FAMY0o2aC7JVol2NJr87k=";
      };
      beamDeps = [
        fast_tls
--- a/pkgs/by-name/ej/ejabberd/update.sh
+++ b/pkgs/by-name/ej/ejabberd/update.sh
@@ -1,5 +1,5 @@
 #!/usr/bin/env nix-shell
-#!nix-shell -I nixpkgs=./. -i bash -p curl jq common-updater-scripts "rebar3WithPlugins {globalPlugins = [beamPackages.rebar3-nix];}" erlang autoconf automake nixfmt
+#!nix-shell -I nixpkgs=./. -i bash -p curl jq common-updater-scripts "rebar3WithPlugins {globalPlugins = [beamMinimalPackages.rebar3-nix];}" beamMinimalPackages.erlang autoconf automake nixfmt
 #shellcheck shell=bash

 set -eu -o pipefail
--- a/pkgs/by-name/ge/gearboy/package.nix
+++ b/pkgs/by-name/ge/gearboy/package.nix
@@ -16,13 +16,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "gearboy";
-  version = "3.8.12";
+  version = "3.8.16";

  src = fetchFromGitHub {
    owner = "drhelius";
    repo = "Gearboy";
    tag = finalAttrs.version;
-    hash = "sha256-5R0ZMgXd/t9AgbaJJNHt71fLD9jiUX74xZ8mkvRsPRk=";
+    hash = "sha256-ayfU9ljovytto6NxVFkMedDVYnHNAQebdtys1C/7JBE=";
  };

  __structuredAttrs = true;
--- a/pkgs/by-name/gi/git-mit/package.nix
+++ b/pkgs/by-name/gi/git-mit/package.nix
@@ -9,7 +9,7 @@
 }:

 let
-  version = "6.5.4";
+  version = "6.6.0";
 in
 rustPlatform.buildRustPackage {
  pname = "git-mit";
@@ -19,10 +19,10 @@ rustPlatform.buildRustPackage {
    owner = "PurpleBooth";
    repo = "git-mit";
    tag = "v${version}";
-    hash = "sha256-X8PNsYhhFgcBZQojOTBh0SN+trO6lstwWzLbo0a1Do4=";
+    hash = "sha256-F9lU75X3Ysb1Lgjc0UVoyhBY1jrrgt5wEc4zjn18HjI=";
  };

-  cargoHash = "sha256-6lKCtNPEKanVxweY8WcyOXnyLOdDMfRPoN/b6bxmKdA=";
+  cargoHash = "sha256-hq05UxZ0wzfz1NVvxOUjpsZ3U7h3w/l4d6mdaoFmO8I=";

  nativeBuildInputs = [ pkg-config ];

--- a/pkgs/by-name/gr/grist-core/package.nix
+++ b/pkgs/by-name/gr/grist-core/package.nix
@@ -34,7 +34,7 @@ stdenv.mkDerivation (
    enterprise = fetchGristEnterprise {
      gristSrc = finalAttrs.src;
      inherit (finalAttrs) version;
-      hash = "sha256-7lqt+L/Qmx/3kl2zJnRsbmCSmu+iAyzpNnqI/yJD9Q8=";
+      hash = "sha256-fAi0qCfNPH+w51EmsaecS1y0aP4vx2kYK9hS5UQHIA8=";
      offlineCacheHash = "sha256-oMLNZZolY9Wg4DwJyYPDL6K28aEyWcXS9ivnzCuYcS0=";
    };

@@ -66,19 +66,19 @@ stdenv.mkDerivation (
  in
  {
    pname = "grist-core";
-    version = "1.7.19";
+    version = "1.7.20";
    __structuredAttrs = true;

    src = fetchFromGitHub {
      owner = "gristlabs";
      repo = "grist-core";
      tag = "v${finalAttrs.version}";
-      hash = "sha256-IKnSluSQnPHO+qAwWF7KR/ukIDHVVulmJqIqaMI88Lg=";
+      hash = "sha256-umLdlxC0YBhhb17XMDVOeSNVJqkO9+DFwaHP3Sq3rWw=";
    };

    offlineCache = fetchYarnDeps {
      yarnLock = "${finalAttrs.src}/yarn.lock";
-      hash = "sha256-E8LDY7GF9d7+iXxr4BLYRUkwQxcpVihMU6HrXJ80pic=";
+      hash = "sha256-o3hsHfgq1/14j0O13mjJ4a+dpwQ9kXkDnNOHsEhCroM=";
    };

    env = {
--- a/pkgs/by-name/io/iosevka-bin/package.nix
+++ b/pkgs/by-name/io/iosevka-bin/package.nix
@@ -17,7 +17,7 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "${name}-bin";
-  version = "34.3.0";
+  version = "34.9.0";

  src = fetchurl {
    url = "https://github.com/be5invis/Iosevka/releases/download/v${finalAttrs.version}/PkgTTC-${name}-${finalAttrs.version}.zip";
--- a/pkgs/by-name/io/iosevka-bin/variants.nix
+++ b/pkgs/by-name/io/iosevka-bin/variants.nix
@@ -1,93 +1,93 @@
 # This file was autogenerated. DO NOT EDIT!
 {
-  Iosevka = "1hi3lj7lhxi9mc9qx5wx6pf2gp4n92nr3w077g8125d0qj1lynmz";
-  IosevkaAile = "0jm03g4z0x2vf27dabcpdhj7y6kmm8c81z3avxa4s5rhw86di3wl";
-  IosevkaCurly = "0sr322g251lsw1bvfcfg5pim8r5lrjh56xyrn0ghd4961cccymvq";
-  IosevkaCurlySlab = "1pjnk9pzn2xknikg7md94cf3m62jjzbkbsp631fkda84vxpla72y";
-  IosevkaEtoile = "1k1ds0bb02rqz9p3bc85512xiihkkljal5p82bappkhha1xqr19v";
-  IosevkaSlab = "132xdhggnq06w062vsm8gq1a9phid7ajwyki7kk76d0xpvh4g91d";
-  IosevkaSS01 = "1r2g1wq2yvzkiywd22x8cji4lg242fvqh2wa80fyj8cb0kza9675";
-  IosevkaSS02 = "0bcjln3aif8vx1l8yfl39yaf2y29rbab21v771y0nh4zq19b3j2h";
-  IosevkaSS03 = "12pps3qhrfg5i7zw2f64ajw3bkgwsa9br857981iv5p9d8fsqaa4";
-  IosevkaSS04 = "0a4x2zhab01abn12r2vq7skjsycij2xkg2hk2zpaa5nzc81vwx7r";
-  IosevkaSS05 = "1g0bvg7ms1smxz1x4p3vbvdmv0ywk9xn88p1lda6glcjjdjvvrj0";
-  IosevkaSS06 = "01kb9mqmkgrrwza5vhdcc4rrwdpq18bmsmk2sdglykxxb4wxdypv";
-  IosevkaSS07 = "0lgx2lshr1z568999c0gj1ym4pjb6y9z9h0sb8wjhjbg2myfzmmv";
-  IosevkaSS08 = "0wxzraih01xxi8sj9y7l5xbplszq4mzimw6zn9asq5lzq0rzyrjy";
-  IosevkaSS09 = "1065na837i39jgy7iml6y2aylsbiipj1kpzrqv370xg70nv4jpvb";
-  IosevkaSS10 = "01n8kxlj6k5674j6yavyl5vcslis6zpmfc26d3yhr13b2lmk8jnx";
-  IosevkaSS11 = "1ds9q64s3vh8s5jzf8hsh37i2dzp98g11by31gip5f3ki0ygiq0s";
-  IosevkaSS12 = "17dw6zsk1y6nh9gdf1wbry792c43rr5qxy2h6jn761g7p5k2yqr4";
-  IosevkaSS13 = "0jyhc22ylhsx5krm7m5fqkpvl6d5qvmwrvizrz1aj6cj9qg7gmk9";
-  IosevkaSS14 = "0n9cibyf9dbhpjv65r0vcz540g878p66nf233y5a9783ilqnaf6g";
-  IosevkaSS15 = "082dj9l6np0jv9l6py0n94dp12z4j21nh4c5rnnd70gwm62a8bs4";
-  IosevkaSS16 = "1d799ggds6yrv7iwif8m9bw5b7wbzzish9yj77k8w2f0m3kkd2bm";
-  IosevkaSS17 = "0fx25bnb3yr9krj3px8zs6s3nbzk75d5dx3g4wy2p103l2dw6kbr";
-  IosevkaSS18 = "1a1f6k45pslin4f07phd4lqcdmqsdwmdn2cyd53zw8hbwc123hy3";
-  SGr-Iosevka = "1p1wrxnlwlwv84ml3y6pd76ipkivk7vg4d4lriv1jf9bc5cf92jq";
-  SGr-IosevkaCurly = "0rzmixda0chbhzmacpqaln5rw83wk5i3aa2ahjh2pyw1mg5aj7ki";
-  SGr-IosevkaCurlySlab = "1byvpqnjb9ima7aw1758x29nrgmsq1hwpxryh0hlyww6yr6iwdc2";
-  SGr-IosevkaFixed = "1a5c67ssj83mzzs7aghmfffchlqajjk4rg5vqlrs2mzm2j03xdkf";
-  SGr-IosevkaFixedCurly = "05b8msl7hxh96djrai6g1s107h3lqzrc2x9qz6qrwni90w5cyv60";
-  SGr-IosevkaFixedCurlySlab = "1nbn1qp977mqg4jlzz6ba4v07f9v7xal7acpfqfw66xjjbbyys36";
-  SGr-IosevkaFixedSlab = "1rs3w2qb9bq8pjvz4lsx3gbiz40jdhjqd7m12mzfwbhmnhxk2pam";
-  SGr-IosevkaFixedSS01 = "1bn3y6k6bg6kibqd9ai6imz8fanz2b8ryj74dva2vcjjhbzw8gfv";
-  SGr-IosevkaFixedSS02 = "01qdpf0zj529s9yp87z54cz9gg4fmpfgrlln1iw19nzj37h2y8kw";
-  SGr-IosevkaFixedSS03 = "0dyj1n82l8zmjrl9061029pjy35vmr4i46bic98m0n23xz10glb7";
-  SGr-IosevkaFixedSS04 = "1kgy80bv21z57lxcc7v22961i2qfczqbvw236f5dsqnjgcx9bf5i";
-  SGr-IosevkaFixedSS05 = "0ac7qnmmnw69gnzm6c0y90mclp0sbqmnyhcaqril2h5nba2s582k";
-  SGr-IosevkaFixedSS06 = "1d5wvzyd7h5n6wg6c8qflmw8a4hc3h4mccf8vam7fglhwbbfswlv";
-  SGr-IosevkaFixedSS07 = "0wjbsdkqr1y10vnmwra16a13yxnvd9gqd030265w6gwnhs0p7r4j";
-  SGr-IosevkaFixedSS08 = "0pypcjicqnm6h133j8m4q5gc1vdk2j2vkl70m81zxlhs9xxf5nlh";
-  SGr-IosevkaFixedSS09 = "0cba4zvq7rgb17bx4z91mbynadgns9szd4wpj5skmg80abkj2wh3";
-  SGr-IosevkaFixedSS10 = "19q3ixasmz0py5h52jx4ic819lv0p2hkipj3gwszhv35cafwi2mc";
-  SGr-IosevkaFixedSS11 = "1zkmhr756k1l5mr51phrc3wkkyc6xpimhz7szxa6r2rq2l0dw5yb";
-  SGr-IosevkaFixedSS12 = "02xxzbnq15dibn3s4b117qafz72a89y1hbznbkds7w1lgrcd3n42";
-  SGr-IosevkaFixedSS13 = "17flb0hw6mddgy39qgi9k18sa4f2mb62qng023zbw2labn1cfk5p";
-  SGr-IosevkaFixedSS14 = "13wqkn6jxajwg0w3rs0m93wzm95i7dsbs4ilni2ab8n4jvx5crhb";
-  SGr-IosevkaFixedSS15 = "04mqjii28fzs6380aqsswcqi8kxd5qykqqw6225z12hb01gz17zz";
-  SGr-IosevkaFixedSS16 = "1i0ngdm70m2fzi7ns5j61rbv9nn3czb0spc7zwj6hg3ric2zddx7";
-  SGr-IosevkaFixedSS17 = "0lsgkvfpj5j4yv5a38afllbhj4py8p2ggx3lfdhd6r8bhqkbn0xi";
-  SGr-IosevkaFixedSS18 = "0yqkjckn5bycp0ckgpf8v9f6w26rpwc27zckbjab29q0l8mv6mz8";
-  SGr-IosevkaSlab = "0ph358rgb0frc4gvar432gsxh7byai9gsrv8awgp089ydjsmwzhj";
-  SGr-IosevkaSS01 = "0kfbh35ibfcj4k38dl3mcs2caplc7s0fagqfjflhz2vwdjwdg1pj";
-  SGr-IosevkaSS02 = "1y3w272bhdyk8vgahr7gayd8q1587wfgfllcr3hj0clgr2k4i64w";
-  SGr-IosevkaSS03 = "1jari56mqa6r7vqqcdcpyidbsv0xl6vps3kpn4p3l02whq1d9wkl";
-  SGr-IosevkaSS04 = "1icn0hj8vwmzk6axfmyqmp6vsm756gwn4l7fhsh0izrrqa5fisz1";
-  SGr-IosevkaSS05 = "12gd65kz1f0i2mrxvmd7vc02r4qrmns7wkzij6klz4fnhfxr7fkz";
-  SGr-IosevkaSS06 = "0vgjdgfm3a396lgz719ykhccx22a35861ckqna1z4k02kqzxps5b";
-  SGr-IosevkaSS07 = "1w8z9ps08yxa8hgqyp31r8yph2n3x3wdhn8dra35xpqrhbf9r6xz";
-  SGr-IosevkaSS08 = "087nyj5pcadz8gg005m4hk6y9hsmvywxnv8bpbz1kw0xlhas23bn";
-  SGr-IosevkaSS09 = "1489nmb0b26any5arppcaxj55an5dsbcr5dz5gpz1mkskl33nqdd";
-  SGr-IosevkaSS10 = "03z56s9zqs7zpdxnq5xpfqz2iddbnj6n3ii5djdg08pms78p5a0z";
-  SGr-IosevkaSS11 = "10byk5zk8x8gkg584cdmjnwx4k7j797blw5mj9rr89v3qz6xd30d";
-  SGr-IosevkaSS12 = "1q40rwqfsk1k51mmkjc89l17cz4r2q69mg9n95nfdgklw96s2pw1";
-  SGr-IosevkaSS13 = "04zmlsz1n40j2yda368dn1918m7zazd4zbmqwjsxiifhqpnl2y2v";
-  SGr-IosevkaSS14 = "05ip3xflipjgp9qbna44fa1gzd5nfc6xs3v4z6xli7c4aiqv96vi";
-  SGr-IosevkaSS15 = "1hhkwk6g041i0zywbh4yn88x9frrghsk77h06k3vayxavg2ygqm3";
-  SGr-IosevkaSS16 = "1mz9811kbgc27sn0njin82v2bphk6gn02gmz3mvl2hgxic97hmaz";
-  SGr-IosevkaSS17 = "112hqzmfcfjj3h0yg9595k9ml0v6cwmkab9yxfjccqyzwmk12s3w";
-  SGr-IosevkaSS18 = "0w0q4znxh2pv4nrdbvgwvfyk8vrm871kps2z7m20pwjl67w6rwj7";
-  SGr-IosevkaTerm = "041arqjjd6nir7swbnl88fshif4aj5fmn77vqi9qswmc5lz4r18z";
-  SGr-IosevkaTermCurly = "1y8s9rarqcdw13lk19dz9k8dvnqcl8nbpbcah8jm313xgxs4cypx";
-  SGr-IosevkaTermCurlySlab = "1dkpv5612zgxijdq5k1v5xdy9l0b2j3pj2phaxdk4px5ayk92i7k";
-  SGr-IosevkaTermSlab = "0f6i383pclkf8n89ra00qs88468vikrwbqmhan5cx5ll5s3j0p7v";
-  SGr-IosevkaTermSS01 = "06snskzqlyjji01n146yp5r49xx6j7kal1rm8qplbibznrb6l7lh";
-  SGr-IosevkaTermSS02 = "04s0y369xsrbsq0kl51jf6mzizc7v1y68wqpvnpxr0qnzsfrfksm";
-  SGr-IosevkaTermSS03 = "1a1dsbbjsmc8bq4hxnwd1ngdd50y936c1ab9j8lj60q7xbifimka";
-  SGr-IosevkaTermSS04 = "0zc39zsysxhcbvndb9j6z46kxsjcj6afcvw7wl5kyrf5l515n3la";
-  SGr-IosevkaTermSS05 = "1nsd9g1rfyxxa2l6b4sf59k2339js5yy3hcrx3k8albyq1v3pm9g";
-  SGr-IosevkaTermSS06 = "1cxnqmxs44savsx04bphh1pnqdcsbbcz7q7fzbgkfzw6pxv0cd29";
-  SGr-IosevkaTermSS07 = "0a2fa875i8597n0q0f0lhxhg05f76nf8cdpvnn3ihhqc98wk4xds";
-  SGr-IosevkaTermSS08 = "13024qddvy4yys9jr4nfqq6y33vqdpaswc5hbjbywzda6ljb7sxq";
-  SGr-IosevkaTermSS09 = "06bz9i4m4rsw3whbgqj8c14y016j316zzi7cc753xnk8ss4ynfq2";
-  SGr-IosevkaTermSS10 = "1lhssdc0dvnqbmy6qmfcpn2psxqvyflqhvvjkrzjwy6gwiqn4bnh";
-  SGr-IosevkaTermSS11 = "11nbhfjzai80i7gw0ig1md5xcabskahqx0qfawhapfrpfil6wwdl";
-  SGr-IosevkaTermSS12 = "07362a24f67qhxmf6lm07zbi2w5rmissnbyig2fc3mpz1f853478";
-  SGr-IosevkaTermSS13 = "1cw5ayfl33hyi26j4vnhm3ymidkhrvcmn7v2f3zcg38ki1d27m84";
-  SGr-IosevkaTermSS14 = "1ksb378jpx1ja5n9nnd27qhnbnlbq7r99yn06lchpdbfxwrk4gqd";
-  SGr-IosevkaTermSS15 = "0jj2cj634ml1cgzqwgr9ivyi7222hmvnl7wm3xhc2ckir1p4jpfa";
-  SGr-IosevkaTermSS16 = "0mf3slw6xrwblv3b4afznv3aizqagj60rdcya7n1bjfdci1jzmjq";
-  SGr-IosevkaTermSS17 = "0xzd8sr07a1cxknb9w8j0yskm3x9zyj5dggdsjdx4dnn5g2rxwnn";
-  SGr-IosevkaTermSS18 = "0rdvxf1kbp44zh7bgp6cpm8kzwp7fr3dch5zn61rzpwrpn1brrdf";
+  Iosevka = "0yhdqzmdillrarflc47lm7qrixjyg24lslbak1d2gk50rwh3409i";
+  IosevkaAile = "1xnbr1j5jf4bdfm392dv7dsh21vvg8qx0wpqdyysjvk5scqp4jma";
+  IosevkaCurly = "1hir3lk47id70k2ghpc9y8d45ka4p37gqv6mvihr8a07mlmqrlx2";
+  IosevkaCurlySlab = "0pvzzfiryjhpqck0cal1n3czp2vfdyf4p2p46qhbvc88xyzcqr9p";
+  IosevkaEtoile = "1ix5mg3dydr228r9qqcrv0ss04pib4m92vs8gzf0pg8pvh51ay6s";
+  IosevkaSlab = "0pqvg9g2bc3gnhdg3mndd9aj6nvhpim20mlsslyqhd5pf8hw4yzj";
+  IosevkaSS01 = "0fasc3ikkzw5d27a8xba1zb51hfqjlw6pz4ixk32rncs40i28swn";
+  IosevkaSS02 = "14z2mdbmjmjf0gfl7wdkwqbyw9ypn6qh5s96qz1nxckk8042x1vd";
+  IosevkaSS03 = "0pkrs0aj9p5l9705f7099h24fgqgr58c7r652ls0qpaqmmsyhm92";
+  IosevkaSS04 = "1sn3gl83qj5qhwx06rqi92lw221zmp2c6pnbd48k2hpksxmg6zhk";
+  IosevkaSS05 = "1v573aq8bmrfp8hz85bivy7db56r8rv97dmxcsj5qmmjxzph6kb1";
+  IosevkaSS06 = "060p1n3xlchijk2cmjpshsanz19zmydnfpjx8m49289q6zyfb5jj";
+  IosevkaSS07 = "1x6hf1g46qk6z7syizb20ni8mflg7rg2isrs242q694bgplkiwd6";
+  IosevkaSS08 = "1vc1f4p4vyrqzh09crhijybarjhb8sl9qjdn1v5c7rma2cqxyg6a";
+  IosevkaSS09 = "1snky1dnxi8hsjd2cc0vgp5db260xn0jsm5awdj1an3ibnd3afjr";
+  IosevkaSS10 = "0hhlm3vs6fmnl99cg9b70rd2larz4rwv69pma2v2m80015ih5c4s";
+  IosevkaSS11 = "153202jcd9rs5spdh5ii9swwgdf0pbh71jvnpn4qp3b3imx6j612";
+  IosevkaSS12 = "13xk5w64qvm4c6k3v6118hv3bdzgqcng4gsdjhwyi3am271fg11p";
+  IosevkaSS13 = "101fnz9c7810m06jmk1db2aaf1x9a3dw3sdvgx9br8knd4fnwkn0";
+  IosevkaSS14 = "010d2v0arqqmi3dj1afg771hqsynn7k48197bv6n1h9hd3mzn6ky";
+  IosevkaSS15 = "15sfp50pksign79hi93rapsj85l2d6p55m7zr8rfvk4z07lair2y";
+  IosevkaSS16 = "1kwaryicgz1gs9f6ibz8sjb2xmryyl41lkpr78ijd1q3m98kf12y";
+  IosevkaSS17 = "1jf277smvgvkia56vzjpfcg3ybb42szlci46443wy6agy4nf03cp";
+  IosevkaSS18 = "1r94qq8j947wh91aiq78a42mf7zq3wdms9cpdkydkrylqqkgv0qd";
+  SGr-Iosevka = "08x16l2aypx6dfk57xknzh72hmjnq36jg0hl9l6i50ag469vyygi";
+  SGr-IosevkaCurly = "16yh5czsgxmc1z0j304bv946rj1yk8xp352m3j9srd0khmi11n6s";
+  SGr-IosevkaCurlySlab = "007iy0p6r8zchb3fx3f54dhqd6lrqlhbfcxjsnzyf2f0a1kzlab4";
+  SGr-IosevkaFixed = "12lksjrgnl83wpzxangkkyzww38kyiph33fizg7jhk8hjc5rcdyq";
+  SGr-IosevkaFixedCurly = "11l17rxkj3f3v4jc8aff1ldgqqaddgyszcvcmcq35zjgcj5dw7x1";
+  SGr-IosevkaFixedCurlySlab = "0c6nbkhijr8pvip0kzdhmszd9sxhhvn4kccdza2pfhy526f73zw5";
+  SGr-IosevkaFixedSlab = "00dif23y12wc0m5zq731xm1yjgwjg05z54nsyx19sjdr5ld9yjsb";
+  SGr-IosevkaFixedSS01 = "1nmsndrm83yndgx50z9dxp6a5804l0ra4hf7x8rgwqxfm9ljbrwq";
+  SGr-IosevkaFixedSS02 = "0296gzgfdf7kwcq1ryfk4yxxg4kkynab5gf63gnh1ly4zap10ymh";
+  SGr-IosevkaFixedSS03 = "170x6kf1vhgaz9lc6dixp0f9by9a7x2g2kln3gbhkxhx3lbd14rs";
+  SGr-IosevkaFixedSS04 = "051dvqrjnwcmf5k1xfhncrvv1wycijbch4qcb2dzqx0sw4azf5v3";
+  SGr-IosevkaFixedSS05 = "1mfhshy3s9xbz6qysvpdsvkqy7rki0y8w114qci5kq12ijsdnj2n";
+  SGr-IosevkaFixedSS06 = "0k01hrzl9658g488sw7yybgzgg4s679d0nalym9pg99lnlf39sf9";
+  SGr-IosevkaFixedSS07 = "0n1wp18g0xp852i4wlcv1q46msj2a3qn5r7jk1wqd7klzshbh4hj";
+  SGr-IosevkaFixedSS08 = "04sg8g4jc83jra6lv71xl802qf8nvdfg4ff8bngdy4p5jbfg3y2a";
+  SGr-IosevkaFixedSS09 = "0fa1l417v932m6qmmscnk2dv5vyzpkxqzyglxxs1c2sd1zx7ldiv";
+  SGr-IosevkaFixedSS10 = "1lrkps0qrvk5nrg34c9c0mdgnc3vsky5fazqmgczafsdc5x1rk8k";
+  SGr-IosevkaFixedSS11 = "0zcf8b21ck4xxy019wh6xjr3cy32hkqycwlmqc1cng6gsywsrqkv";
+  SGr-IosevkaFixedSS12 = "10ajjs672l981bv6zrsa9ranzgn3j1c372yg0sfk2akvjb2l2vpy";
+  SGr-IosevkaFixedSS13 = "06bhz5xjxix0bj4wypvrq65s1qirnmr9035d8kp6r2pisjq18q91";
+  SGr-IosevkaFixedSS14 = "14av7f9xp9dswacdig42ndy9fq7avcbld2asc0qqrgry1nmbwsbf";
+  SGr-IosevkaFixedSS15 = "0bg894yjm3bnf1alshkkwdznn7414gjyhrdwa05g0wl26bhwq4ys";
+  SGr-IosevkaFixedSS16 = "072vhaxbnz6sap4m85fr8fp9gjhrzyfs7kpgpm8fxpjyablyamf1";
+  SGr-IosevkaFixedSS17 = "1l8jcqil4hxnbgcbxcb2xh9977m29xxgvrhxmjcbymn15ywj4pzv";
+  SGr-IosevkaFixedSS18 = "08m0cmqx2qii85711z9wh289s3312zba5ysiqhgzydm8hxxq0fzh";
+  SGr-IosevkaSlab = "1xq2ff4417x69pbfq7fgcvdb2lsmghvy3s8zjnxcr0zvddl46i72";
+  SGr-IosevkaSS01 = "0xa36ly32gn4vqsy593v6hn5cfb66d34f6hws24v26z2ylqc1cii";
+  SGr-IosevkaSS02 = "1sw4772lvbdg5mkvw3grvfq5ccl31syc09rk3gqman6i3nbb4cqf";
+  SGr-IosevkaSS03 = "1zqxqb40c7rwsr4g25qs8rwa6y1kxy5jqk6s664cm4ym707jxhmr";
+  SGr-IosevkaSS04 = "1vd7syl08dwfqapp2ygxhf6qmv4aqznzwcsdkbw4v71z67k2fjn6";
+  SGr-IosevkaSS05 = "0lq2xl9jh469lqdlh6lk7ra2sn6ha5ww409wkmpq35jr0rlrch2q";
+  SGr-IosevkaSS06 = "1pwjdwz65nklrfrmb6pwgd42729ih23zfa0vs9g9wyyh96b3hpwv";
+  SGr-IosevkaSS07 = "065zmdrpm112vsj6azkh97z06dn1vh2n4shg3l1pq0db2l15b4nh";
+  SGr-IosevkaSS08 = "0v4qgsgsn4mwp850bm2p9fwpk10rhwv6cqzcyj519q6fwyhnrwsb";
+  SGr-IosevkaSS09 = "00fbfqp65mzgkkr733cak8p5w70919r5jdcs0fkfsy42adgs70kg";
+  SGr-IosevkaSS10 = "038hmz2xdz49x075qb3gikbmcl58889s2jplnjkq7id7f6xy35ka";
+  SGr-IosevkaSS11 = "0838xa9dqf710fxc3gcqyg5ibwjn8k9sfrrpxrgdx5j3g8k89h83";
+  SGr-IosevkaSS12 = "0mj6yr4gc6cbmwfjvmkpx4dhgg3hwiqz1ciah1lcaay1bdd908s7";
+  SGr-IosevkaSS13 = "1178mh8k53kwcq8qd1wf3v9ylhnmzvrn63yfkd6xdidpl43xgx8j";
+  SGr-IosevkaSS14 = "07yydffly0fia16vliggyddwflyif2wi1zxwchhg7r0jpx00yc2j";
+  SGr-IosevkaSS15 = "0pxqmdgd0qj3pbvl9k6fw05kyxa19m0idff7agjzcmyp9cm3zjml";
+  SGr-IosevkaSS16 = "1y69sn5m46navy2slw78d8in5lq1h79z61rqwg375m41i2biy34d";
+  SGr-IosevkaSS17 = "1isma8zs23vzs4535lxqqrw5ngvv9vi2xlvdb4vsbzih8kq67hsp";
+  SGr-IosevkaSS18 = "1mshalbymvp7xy3pqlnlk1cm149626ybpmz373zzkh6w5ac8qi7s";
+  SGr-IosevkaTerm = "0vkw5hq8s34qggc171am5wp5n35rv9m0nyiskwgrdwrm1r7vv72z";
+  SGr-IosevkaTermCurly = "0jxmlwmach4jywx5dppg01bvmxv06f4vxkyiymmxkm8wcn8jj22q";
+  SGr-IosevkaTermCurlySlab = "0xrpbz8rpjan2dhvds1rx7m4fz6iqblsdh1rg9dq1y2zy8avc5fc";
+  SGr-IosevkaTermSlab = "0x0lq7ygjcycrw6lbrg9x24138irsfpf3ar21xlpzgzcny4bckbj";
+  SGr-IosevkaTermSS01 = "0rk7wm03ydb6psk696vp3qyr3gk0g3kr6v1ndx3qqpj952nb29hy";
+  SGr-IosevkaTermSS02 = "0wh9jq23ly9cdr83rwnqviamf642rpcq7k4dp2qflwny1lmjvmdi";
+  SGr-IosevkaTermSS03 = "0aplriv82yk0pnpfvklph3jb79bsm5hgxbv0m87j1yfv1hsfc3xm";
+  SGr-IosevkaTermSS04 = "0daw5l8234pppr93d7x9dp6zllpgli29fbdnrni1d975dw2djq7s";
+  SGr-IosevkaTermSS05 = "008rvh3f102cj75irgs49vm5r444r64wai6j0i8p31c7fszqy4xq";
+  SGr-IosevkaTermSS06 = "1dznqxnpjxljf0nbsdxhn7fbdj3v51daskkbdkcnkwbgwxlfwjs2";
+  SGr-IosevkaTermSS07 = "0c4iprfbpjc7fmb8fivqyqlqvihxim745mknjdh7s08bbj5kki0b";
+  SGr-IosevkaTermSS08 = "10dlk1mznk10ydc943wfvf74wzkq205dvkqvhnzcbw575im0qfmp";
+  SGr-IosevkaTermSS09 = "11flx0bkxgypl0zf3wkl7ik3gvqig42knc8ishlmgjnwlsi1n4iq";
+  SGr-IosevkaTermSS10 = "176vfy21shvsa5apgjncs0dsdzdvq58418ikc01ybggrdkfl51xg";
+  SGr-IosevkaTermSS11 = "0mjaj1gbnr8842h0c26xqw70xmqylrf5a0fljmr5cnkj151fla91";
+  SGr-IosevkaTermSS12 = "11kk68wlcdwm3hp9z1v57g2i0p86n4v6w92r84k7470l19xaq00s";
+  SGr-IosevkaTermSS13 = "1y6r8f6fqwxj8v5q5d48arblqnpxf7cvglkgrdzkxyhibwsdm6w8";
+  SGr-IosevkaTermSS14 = "0zgy85k6s7g4pmjpswj0b9mrh67i3pcnvlrv84i4sx7xbrnz703m";
+  SGr-IosevkaTermSS15 = "058gmy2v5af6c2r00mi5s0h3203cn6wfz8x3jzmr6a8lh6wxx1pf";
+  SGr-IosevkaTermSS16 = "0fwg8s35ianms81d4x8nryps62asngi5yh8lmmry27a1152ya9ai";
+  SGr-IosevkaTermSS17 = "0cm41jw8fmyibdzmlp5m37ma5z11lb5kr5r5jri2fsm8pcqb32h9";
+  SGr-IosevkaTermSS18 = "1brbklj892jfrcsw67f56kkbfzw0ax8a8bkdy9rkw2fisc3yyfm2";
 }
--- a/pkgs/by-name/jc/jc303/package.nix
+++ b/pkgs/by-name/jc/jc303/package.nix
@@ -82,13 +82,13 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "jc303";
-  version = "0.12.3";
+  version = "0.13.0";

  src = fetchFromGitHub {
    owner = "midilab";
    repo = "jc303";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-5OA7ir8loT0Lx05guwuZNCW9J9I3TA5+A9JZ9E7oWXA=";
+    hash = "sha256-isU0EzSQNHRQ9nRURr/RR0yRWQddUB5Bb0cBSSBwR7w=";
  };

  patches = [
--- a/pkgs/by-name/kf/kftray/package.nix
+++ b/pkgs/by-name/kf/kftray/package.nix
@@ -26,7 +26,7 @@ in
 stdenv.mkDerivation (
  finalAttrs:
  let
-    cargoHash = finalAttrs.cargoDeps.hash or "sha256-cbNTUQ7HkpEjWYGyzrcFXtwzEc+uAMWxzxEhqlXuCUs=";
+    cargoHash = finalAttrs.cargoDeps.hash or "sha256-NGGeUQUN8+2IZD6F5//G6E2XKG/zeqADr5ek75r7Puk=";
    kftrayBinaries = rustPlatform.buildRustPackage {
      pname = "kftray-binaries";
      cargoBuildFlags = [
@@ -55,13 +55,13 @@ stdenv.mkDerivation (
  in
  {
    pname = "kftray";
-    version = "0.27.33";
+    version = "0.29.1";

    src = fetchFromGitHub {
      owner = "hcavarsan";
      repo = "kftray";
      tag = "v${finalAttrs.version}";
-      hash = "sha256-1lVTrtiM/P27GlU5jQ7GcLOUEmXU2T/O7grx4c0MJNY=";
+      hash = "sha256-s8FRd6JiJXfIYy2PpHOFO6t1CTHFHGI4sLmq2loXxpo=";
    };

    cargoRoot = "./";
@@ -79,7 +79,7 @@ stdenv.mkDerivation (
      inherit (finalAttrs) pname version src;
      inherit pnpm;
      fetcherVersion = 4;
-      hash = "sha256-FIfQZ5OknSFvaDZ3MbW8+36aAsjJrU+5irN2vaLpS54=";
+      hash = "sha256-efs6j56aIb5ze/CbuwFumklwK1FeQ2Y1qmmdC55BnM4=";
    };

    buildInputs = [
--- a/pkgs/by-name/li/libewf/package.nix
+++ b/pkgs/by-name/li/libewf/package.nix
@@ -27,7 +27,7 @@ stdenv.mkDerivation (finalAttrs: {
  ++ lib.optionals stdenv.hostPlatform.isDarwin [ bzip2 ];

  # cannot run test program while cross compiling
-  configureFlags = lib.optionals (!stdenv.buildPlatform.canExecute stdenv.hostPlatform) [
+  configureFlags = lib.optionals (stdenv.buildPlatform != stdenv.hostPlatform) [
    "ac_cv_openssl_xts_duplicate_keys=yes"
  ];

--- a/pkgs/by-name/lo/lookapp/package.nix
+++ b/pkgs/by-name/lo/lookapp/package.nix
@@ -27,7 +27,7 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "lookapp";
-  version = "0.6.13";
+  version = "0.7.1";

  __structuredAttrs = true;

@@ -35,13 +35,13 @@ rustPlatform.buildRustPackage (finalAttrs: {
    owner = "kunkka19xx";
    repo = "look";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-rfSuwSRD1mHpvi8wP+xZNaE4bsc6btMRxAM4q/314FU=";
+    hash = "sha256-o0ljBn4b2d+Mcelrx4Zr4RdwozYt3fB1e7kEYCRtmgA=";
  };

  cargoRoot = "apps/linows/src-tauri";
  buildAndTestSubdir = finalAttrs.cargoRoot;

-  cargoHash = "sha256-U58By3qm5hr35oZjOChOHgf7LcrJy5VEAAjKz+vWdmw=";
+  cargoHash = "sha256-dCeeUHbDQUBTTfJrwb7UOdxOdl6z6jSNm7GwH6BrYAQ=";

  nativeBuildInputs = [
    copyDesktopItems
--- a/pkgs/by-name/mi/mise/package.nix
+++ b/pkgs/by-name/mi/mise/package.nix
@@ -14,6 +14,7 @@
  cmake,
  cacert,
  tzdata,
+  python3,
  usage,
  testers,
  runCommand,
@@ -22,16 +23,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "mise";
-  version = "2026.8.6";
+  version = "2026.9.18";

  src = fetchFromGitHub {
    owner = "jdx";
    repo = "mise";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-dm+cIb6i+npYSIUfxaEi3ohumeT9lXXlQwYREndwZFE=";
+    hash = "sha256-6l8U2p8bX+UznA6iNaLyQ2VyPwkPacgupSGCeUPfJmA=";
  };

-  cargoHash = "sha256-VzRNo2fa4n4oOw27itjFebKpIhSdm8UmI/xdBBJIh9g=";
+  cargoHash = "sha256-l5AW4YyP8iSSYGkzvx/k30zmtoj2X0gtDD/CY77NGFw=";

  nativeBuildInputs = [
    installShellFiles
@@ -47,25 +48,38 @@ rustPlatform.buildRustPackage (finalAttrs: {
      ./src/cli/generate/git_pre_commit.rs \
      ./src/cli/generate/snapshots/*.snap

-    substituteInPlace ./src/test.rs \
+    substituteInPlace ./src/testing.rs \
      --replace-fail '/usr/bin/env bash' '${lib.getExe bash}'

-    substituteInPlace ./src/git.rs \
+    substituteInPlace ./crates/mise-util/src/git.rs \
      --replace-fail '"git"' '"${lib.getExe git}"'

-    substituteInPlace ./src/env_diff.rs \
+    substituteInPlace ./crates/mise-util/src/env_diff.rs \
      --replace-fail '"bash"' '"${lib.getExe bash}"'

    substituteInPlace ./src/cli/direnv/exec.rs \
      --replace-fail '"env"' '"${lib.getExe' coreutils "env"}"' \
      --replace-fail 'cmd!("direnv"' 'cmd!("${lib.getExe direnv}"'
+
+    # tests spawn helpers with PATH=/usr/bin:/bin, which is near-empty here
+    substituteInPlace ./crates/mise-util/src/cmd/tests.rs \
+      --replace-fail '.env("PATH", "/usr/bin:/bin")' '.env("PATH", "${lib.getBin coreutils}/bin:/usr/bin:/bin")'
+
+    substituteInPlace ./crates/mise-util/src/inline_command.rs \
+      --replace-fail '.env("PATH", "/usr/bin:/bin")' '.env("PATH", "${lib.getBin coreutils}/bin:/usr/bin:/bin")' \
+      --replace-fail 'Command::new("/bin/sh")' 'Command::new("${lib.getExe' bash "sh"}")'
+
+    substituteInPlace ./crates/mise-util/src/agecrypt/fixtures/age-plugin-se.py \
+      --replace-fail '#!/usr/bin/env python3' '#!${lib.getExe python3}'
  '';

  nativeCheckInputs = [
    cacert
    cmake
+    coreutils
    # gix spawns git-upload-pack by name in file:// clone tests.
    git
+    python3
    rustPlatform.bindgenHook
  ];

@@ -74,33 +88,85 @@ rustPlatform.buildRustPackage (finalAttrs: {
    NIX_CFLAGS_COMPILE = "-Wno-error";
    # tera date helper tests look up timezone data via TZDIR.
    TZDIR = "${tzdata}/share/zoneinfo";
+    # the other profiles' 250ms slow-timeout kills tests on loaded builders
+    NEXTEST_PROFILE = "ci-shared";
  };

+  # the suite assumes nextest's process-per-test model: tests move or unlink
+  # the process cwd, which strands later tests in a shared `cargo test` process
+  useNextest = true;
+
+  # nextest's libtest emulation takes `--skip PATTERN`, not `--skip=`
  checkFlags = [
    # last_modified will always be different in nix
-    "--skip=tera::tests::test_last_modified"
-  ]
-  ++ lib.optionals (stdenv.hostPlatform.isDarwin) [
-    # shell out to macOS system binaries that the darwin sandbox refuses to exec
-    "--skip=system::defaults::tests::test_status_missing_keys_are_unset"
+    "--skip"
+    "tera::tests::test_last_modified"
+    # bootstrapping node-gyp through aube requires network access
+    "--skip"
+    "mise_binary_services_aube_node_gyp_bootstrap_trampoline"
    # we don't care about brew tests and a lot of them fails here
-    "--skip=system::packages::brew::cask::tests::"
+    "--skip"
+    "system::packages::brew::cask::tests::"
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isDarwin [
+    # shell out to macOS system binaries that the darwin sandbox refuses to exec
+    "--skip"
+    "system::defaults::tests::test_status_missing_keys_are_unset"
+    # need a running cfprefsd
+    "--skip"
+    "system::defaults::tests::test_dock_apps_native_round_trip"
+    "--skip"
+    "system::defaults::tests::test_host_scopes_are_independent"
+    "--skip"
+    "system::defaults::tests::test_host_uuid_names_core_foundation_byhost_files"
+    "--skip"
+    "system::defaults::tests::test_nested_value_round_trip"
+    "--skip"
+    "system::defaults::tests::test_patch_native_round_trip_and_preflight"
+    "--skip"
+    "system::defaults::tests::test_sandboxed_round_trip_writes_container"
+    # sandbox-exec is unavailable in the sandbox
+    "--skip"
+    "sandbox::macos::tests::"
+    "--skip"
+    "cmd::tests::test_macos_sandbox_preserves_piped_stdin"
+  ]
+  ++ lib.optionals stdenv.hostPlatform.isLinux [
+    # un_dmg shells out to hdiutil
+    "--skip"
+    "file::tests::links::un_dmg_accepts_license_and_extracts_app"
+    "--skip"
+    "file::tests::links::un_dmg_extracts_app_without_license"
+    # the copy probe symlinks /bin/cp, which the sandbox does not provide
+    "--skip"
+    "backend::spm::tests::test_inline_install_command_uses_install_environment"
+    # chmods setuid, which the sandbox refuses
+    "--skip"
+    "system_install::tests::archive_boundary"
  ];

-  cargoTestFlags = [ "--all-features" ];
-  # some tests access the same folders, don't test in parallel to avoid race conditions
+  # mise-util's own tests keep their caches under the real $HOME
+  preCheck = ''
+    export HOME=$(mktemp -d)
+  '';
+
+  # every test process resets the same fixed $HOME/cwd
  dontUseCargoParallelTests = true;

+  cargoTestFlags = [
+    # much of the suite moved into the mise-util workspace crate
+    "--package=mise"
+    "--package=mise-util"
+    "--all-features"
+    "--no-fail-fast"
+  ];
+
  # HTTP tests use mock servers that bind to localhost. Without this, darwin builds fail.
  __darwinAllowLocalNetworking = true;

  postInstall = ''
    installManPage ./man/man1/mise.1

-    substituteInPlace ./completions/{mise.bash,mise.fish,_mise}  \
-      --replace-fail 'usage &> /dev/null' '${lib.getExe usage} &> /dev/null' \
-      --replace-fail 'usage complete-word' '${lib.getExe usage} complete-word'
-
    installShellCompletion \
      --bash ./completions/mise.bash \
      --fish ./completions/mise.fish \
--- a/pkgs/by-name/mo/models-dev/package.nix
+++ b/pkgs/by-name/mo/models-dev/package.nix
@@ -60,7 +60,7 @@ let
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
  pname = "models-dev";
-  version = "sdk-v0.0.5-unstable-2026-09-22";
+  version = "sdk-v0.0.5-unstable-2026-10-02";

  __structuredAttrs = true;
  strictDeps = true;
@@ -68,8 +68,8 @@ stdenvNoCC.mkDerivation (finalAttrs: {
  src = fetchFromGitHub {
    owner = "anomalyco";
    repo = "models.dev";
-    rev = "d0a0af81e26a783730ba502b6fbaf7b9ec52714b";
-    hash = "sha256-crR+erCZFBe2pUIHcoT6MWJfJSd7hXWCj1sJ8a1YDJo=";
+    rev = "e752025f46d6ab6357e7df98e169e7357b033293";
+    hash = "sha256-A4iXr7hJo+0TTfNntx5f197XiSKPTIkiejjrBKzYTUQ=";
  };

  nativeBuildInputs = [ bun ];
--- a/pkgs/by-name/mo/mongodb-atlas-cli/package.nix
+++ b/pkgs/by-name/mo/mongodb-atlas-cli/package.nix
@@ -11,16 +11,16 @@

 buildGoModule (finalAttrs: {
  pname = "mongodb-atlas-cli";
-  version = "1.58.3";
+  version = "1.59.0";

  src = fetchFromGitHub {
    owner = "mongodb";
    repo = "mongodb-atlas-cli";
    tag = "atlascli/v${finalAttrs.version}";
-    hash = "sha256-C4Sc2MEMXB0p7B6yoHFMYVj5iohIy9Szri1dg/66qRY=";
+    hash = "sha256-5VX6lIZdLc+FCOtP+PFBRHcXJSReu2scMYfGEh3kKQs=";
  };

-  vendorHash = "sha256-cCg6dBCJcORKDHQyFz+xGksNGRyz2pkra/j4IcRU5do=";
+  vendorHash = "sha256-h330R4hbRyDnMMpgYIw8JxF1/q8rOMyDK0dkIZSdGM4=";

  nativeBuildInputs = [ installShellFiles ];

--- a/pkgs/by-name/mp/mpls/package.nix
+++ b/pkgs/by-name/mp/mpls/package.nix
@@ -7,16 +7,16 @@
 }:
 buildGoModule (finalAttrs: {
  pname = "mpls";
-  version = "0.22.0";
+  version = "0.23.0";

  src = fetchFromGitHub {
    owner = "mhersson";
    repo = "mpls";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-26WRMprKyuxyyW8rBwjTPbsU9XCqUle6NBIoubXuzCM=";
+    hash = "sha256-3rXBQ1gvN2gesoFoQf0n/bnNG3/b94Y/jeTZDiXL+h4=";
  };

-  vendorHash = "sha256-Yo6uD0hRwBEPtYDqYs4ZB5NhICwZpkO3VdCl8B/+7qQ=";
+  vendorHash = "sha256-NGcl9KgdUPwWotAhRNlULF+RQXgQ2mdFctZLfGTiRkQ=";

  ldflags = [
    "-s"
--- a/pkgs/by-name/ne/netbird/package.nix
+++ b/pkgs/by-name/ne/netbird/package.nix
@@ -78,7 +78,7 @@ let
 in
 buildGoModule (finalAttrs: {
  pname = "netbird-${componentName}";
-  version = "0.79.0";
+  version = "0.80.0";

  __structuredAttrs = true;

@@ -86,7 +86,7 @@ buildGoModule (finalAttrs: {
    owner = "netbirdio";
    repo = "netbird";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-Bi83uh8VKvFGUY+AxP34VCXYxpZI1C/oOa6eHmKXpDw=";
+    hash = "sha256-oZgDYmNzf8UESUEbwn0Br0CaPTNLaEpuiKR2wW5zeGw=";
  };

  overrideModAttrs = final: prev: {
@@ -100,7 +100,7 @@ buildGoModule (finalAttrs: {
  };

  proxyVendor = true;
-  vendorHash = "sha256-+JwuUz8msyoiPUTz8cH3vn9DrvLp6gaM2NqFuTOcRdg=";
+  vendorHash = "sha256-2lM0KtyU3RxA7KJtM10JslMpyHmgqxQ23B1Ieq986Y8=";

  nativeBuildInputs = [
    installShellFiles
--- a/pkgs/by-name/om/omp/package.nix
+++ b/pkgs/by-name/om/omp/package.nix
@@ -32,7 +32,7 @@ let
 in
 stdenv.mkDerivation (finalAttrs: {
  pname = "omp";
-  version = "18.4.8";
+  version = "18.4.10";

  strictDeps = true;
  __structuredAttrs = true;
@@ -41,12 +41,12 @@ stdenv.mkDerivation (finalAttrs: {
    owner = "can1357";
    repo = "oh-my-pi";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-AMWaw6lbNV4+yncRnWtU3ifaKTk2d+dlyGmE+KySjdQ=";
+    hash = "sha256-w61FLXu8E0d2fVT/HcSSJk1f2VJ0ruZDK0MtKKdqQeg=";
  };

  cargoDeps = rustPlatform.fetchCargoVendor {
    inherit (finalAttrs) src;
-    hash = "sha256-8E8WBFD61zTBnwTPwrKAVbtFRnRKibtrUZfixi+2xvo=";
+    hash = "sha256-T6LvmmBbenf6zKZRwTMBuYM+7bjndippWOOwuu0i50I=";
  };

  postPatch = ''
--- a/pkgs/by-name/pr/prometheus/package.nix
+++ b/pkgs/by-name/pr/prometheus/package.nix
@@ -38,7 +38,7 @@
 }:

 let
-  version = "3.14.0";
+  version = "3.15.0";

  pname = "prometheus";

@@ -46,7 +46,7 @@ let
    owner = "prometheus";
    repo = "prometheus";
    tag = "v${version}";
-    hash = "sha256-7PSfh+KWUpmL3BZ7INa1DOZ/ysaXXdWG9n/F+H0cGYo=";
+    hash = "sha256-H0VkirdEVWoFxg86g8utf6EuCSH3pHD8iuHg6y0xOZE=";
  };

  assets = stdenv.mkDerivation (finalAssetsAttrs: {
@@ -65,7 +65,7 @@ let
      inherit (finalAssetsAttrs) pname version src;
      pnpm = pnpm_11;
      fetcherVersion = 4;
-      hash = "sha256-lmKUkeDdinb6WlnZSx3FnBlF/ACgUmvSMpYo84tRdCw=";
+      hash = "sha256-iSnP2zImIBklU/Ejq2NiuAYAo0SCuWtYbsAyTFHuD7Q=";
    };

    nativeBuildInputs = [
@@ -113,7 +113,7 @@ buildGoModule (finalAttrs: {
    src
    ;

-  vendorHash = "sha256-sCgxO2/w3Bi6Ncs/Q+JVZVtQC448FEx3llYxe/UxWEE=";
+  vendorHash = "sha256-ax/uL+fR0dGOiEMQfEzYPh+437i6sUGFmBEBfENbEqI=";

  proxyVendor = true;

--- a/pkgs/by-name/pr/proton-pass-cli/package.nix
+++ b/pkgs/by-name/pr/proton-pass-cli/package.nix
@@ -15,7 +15,7 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "proton-pass-cli";
-  version = "2.4.1";
+  version = "2.4.2";

  __structuredAttrs = true;
  strictDeps = true;
@@ -57,15 +57,15 @@ stdenv.mkDerivation (finalAttrs: {
    sources = {
      "aarch64-darwin" = fetchurl {
        url = "https://proton.me/download/pass-cli/${finalAttrs.version}/pass-cli-macos-aarch64";
-        hash = "sha256-Sx+OqpLUTM3d0rb3Fsjz4O04jLKHCAWbu8hhcPw5U5w=";
+        hash = "sha256-mehiCU/SpPgniMkAC6WpIkbnc5+Gw1qEZVudfirfcic=";
      };
      "aarch64-linux" = fetchurl {
        url = "https://proton.me/download/pass-cli/${finalAttrs.version}/pass-cli-linux-aarch64";
-        hash = "sha256-ZVo/bG6/hrC8Z8yy4JmgkBo63xP4zAdNlliGv+cEA/o=";
+        hash = "sha256-7uOPxFSaXfy7eUqvy21RfJ4M0Nw8U7uymX/YFC7Wgcc=";
      };
      "x86_64-linux" = fetchurl {
        url = "https://proton.me/download/pass-cli/${finalAttrs.version}/pass-cli-linux-x86_64";
-        hash = "sha256-9BiEMEZuCj1mi1Z5GotDAWLLIM6xCP7U/b/P530wgOY=";
+        hash = "sha256-QIm99ZgRQKxb7mXS15v5h2dTf1TTMZe3nl+GxjBxSEI=";
      };
    };
    updateScript = writeShellScript "update-proton-pass-cli" ''
--- a/pkgs/by-name/qq/qq/package.nix
+++ b/pkgs/by-name/qq/qq/package.nix
@@ -3,7 +3,9 @@
  libuuid,
  cups,
  dpkg,
-  fetchurl,
+  cacert,
+  curl,
+  jq,
  glib,
  libssh2,
  gtk3,
@@ -19,6 +21,7 @@
  nss,
  libxdamage,
  systemd,
+  runCommandLocal,
  stdenv,
  undmg,
  at-spi2-core,
@@ -31,12 +34,40 @@
 }:

 let
-  sources = import ./sources.nix { inherit fetchurl; };
+  fetchqq =
+    {
+      url,
+      hash,
+    }:
+    runCommandLocal (baseNameOf url)
+      {
+        outputHash = hash;
+        outputHashMode = "flat";
+        nativeBuildInputs = [
+          curl
+          jq
+          cacert
+        ];
+      }
+      ''
+        # https://github.com/flathub/com.qq.QQ/issues/274#issuecomment-5512982615
+        signedUrl=$(
+          curl -fsS --retry 3 -X POST "https://im.qq.com/http2rpc/gotrpc/noauth/trpc.qqntv2.urlsign.UrlSign/GetSign" \
+            -H "Content-Type: application/json" \
+            -H 'x-oidb: {"uint32_command":"0x9b8e","uint32_service_type":1}' \
+            -d "{\"url\":\"${url}\"}" | jq -er '.data.url'
+        )
+        curl -fL --retry 3 -o "$out" "$signedUrl"
+      '';
+  sources = import ./sources.nix { };
  source =
    sources.${stdenv.hostPlatform.system}
      or (throw "Unsupported system: ${stdenv.hostPlatform.system}");
  pname = "qq";
-  inherit (source) version src;
+  version = source.version;
+  src = fetchqq {
+    inherit (source) url hash;
+  };
  passthru = {
    # nixpkgs-update: no auto update
    updateScript = ./update.sh;
--- a/pkgs/by-name/qq/qq/sources.nix
+++ b/pkgs/by-name/qq/qq/sources.nix
@@ -1,26 +1,20 @@
 # Generated by ./update.sh - do not update manually!
-# Last updated: 2026-08-15
-{ fetchurl }:
+# Last updated: 2026-09-27
+{ }:
 {
  aarch64-darwin = {
-    version = "7.0.0-2026-08-12";
-    src = fetchurl {
-      url = "https://qqdl.gtimg.cn/qqfile/QQNT/9.9.33/release/126b7ce6/QQ_7.0.0_260812_01.dmg";
-      hash = "sha256-sZXCbfNir1iVTImKsd2YR4Sium9Xpinm+5s+zDv55lw=";
-    };
+    version = "7.0.2-2026-09-24";
+    url = "https://qqdl.gtimg.cn/qqfile/QQNTV2/9.9.36/release/837fcb63/QQ_7.0.2_260924_01.dmg";
+    hash = "sha256-0nC3jwshBTJjcHZTKog9yGWYUbbaqSRRmDmFq58yFvA=";
  };
  aarch64-linux = {
-    version = "3.2.32-2026-08-12";
-    src = fetchurl {
-      url = "https://qqdl.gtimg.cn/qqfile/QQNT/9.9.33/release/3f89efc5/QQ_3.2.32_260812_arm64_01.deb";
-      hash = "sha256-h5bM/WaswCXvGNs3GFUy1AvIxYkh4X2m0owpWsvPj5I=";
-    };
+    version = "3.2.34-2026-09-24";
+    url = "https://qqdl.gtimg.cn/qqfile/QQNTV2/9.9.36/release/9ee04bef/QQ_3.2.34_260924_arm64_01.deb";
+    hash = "sha256-GBuJXLVzVI45blS7BUjMqS/9wbGksBj6RVG7BiOF/co=";
  };
  x86_64-linux = {
-    version = "3.2.32-2026-08-12";
-    src = fetchurl {
-      url = "https://qqdl.gtimg.cn/qqfile/QQNT/9.9.33/release/3f89efc5/QQ_3.2.32_260812_amd64_01.deb";
-      hash = "sha256-0IXdiTlyJQYeufGUMI9ogSmBjtRFd36XpKChbhPXsOg=";
-    };
+    version = "3.2.34-2026-09-24";
+    url = "https://qqdl.gtimg.cn/qqfile/QQNTV2/9.9.36/release/9ee04bef/QQ_3.2.34_260924_amd64_01.deb";
+    hash = "sha256-Q2xl4d0oQi4SiiHL3bX+Ti5sB51/J/7CVB4BTTjMM24=";
  };
 }
--- a/pkgs/by-name/qq/qq/update.sh
+++ b/pkgs/by-name/qq/qq/update.sh
@@ -5,6 +5,14 @@ set -euo pipefail

 cd $(readlink -e $(dirname "${BASH_SOURCE[0]}"))

+sign_url() {
+  # https://github.com/flathub/com.qq.QQ/issues/274#issuecomment-5512982615
+  curl -fsS -X POST "https://im.qq.com/http2rpc/gotrpc/noauth/trpc.qqntv2.urlsign.UrlSign/GetSign" \
+    -H "Content-Type: application/json" \
+    -H 'x-oidb: {"uint32_command":"0x9b8e","uint32_service_type":1}' \
+    -d "{\"url\":\"$1\"}" | jq -er '.data.url'
+}
+
 # darwin

 darwin_payload=$(curl https://cdn-go.cn/qq-web/im.qq.com_new/latest/rainbow/macOSConfig.js | grep -oP "var params= \K\{.*\}(?=;)")
@@ -12,7 +20,7 @@ darwin_version=$(jq -r .version <<< "$darwin_payload" | awk -F\  '{print $1}')-$

 darwin_url=$(jq -r .downloadUrl <<< "$darwin_payload")

-darwin_hash=$(nix-prefetch-url $darwin_url)
+darwin_hash=$(nix-prefetch-url "$(sign_url "$darwin_url")")

 # use friendlier hashes
 darwin_hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 "$darwin_hash")
@@ -25,8 +33,8 @@ linux_version=$(jq -r .version <<< "$linux_payload")-$(jq -r .updateDate <<< "$l
 linux_aarch64_url=$(jq -r .armDownloadUrl.deb <<< "$linux_payload")
 linux_x86_64_url=$(jq -r .x64DownloadUrl.deb <<< "$linux_payload")

-linux_aarch64_hash=$(nix-prefetch-url $linux_aarch64_url)
-linux_x86_64_hash=$(nix-prefetch-url $linux_x86_64_url)
+linux_aarch64_hash=$(nix-prefetch-url "$(sign_url "$linux_aarch64_url")")
+linux_x86_64_hash=$(nix-prefetch-url "$(sign_url "$linux_x86_64_url")")

 # use friendlier hashes
 linux_aarch64_hash=$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 "$linux_aarch64_hash")
@@ -35,28 +43,22 @@ linux_x86_64_hash=$(nix --extra-experimental-features nix-command hash convert -
 cat >sources.nix <<EOF
 # Generated by ./update.sh - do not update manually!
 # Last updated: $(date +%F)
-{ fetchurl }:
+{ }:
 {
  aarch64-darwin = {
    version = "$darwin_version";
-    src = fetchurl {
-      url = "$darwin_url";
-      hash = "$darwin_hash";
-    };
+    url = "$darwin_url";
+    hash = "$darwin_hash";
  };
  aarch64-linux = {
    version = "$linux_version";
-    src = fetchurl {
-      url = "$linux_aarch64_url";
-      hash = "$linux_aarch64_hash";
-    };
+    url = "$linux_aarch64_url";
+    hash = "$linux_aarch64_hash";
  };
  x86_64-linux = {
    version = "$linux_version";
-    src = fetchurl {
-      url = "$linux_x86_64_url";
-      hash = "$linux_x86_64_hash";
-    };
+    url = "$linux_x86_64_url";
+    hash = "$linux_x86_64_hash";
  };
 }
 EOF
--- a/pkgs/by-name/ra/radicale/package.nix
+++ b/pkgs/by-name/ra/radicale/package.nix
@@ -7,14 +7,14 @@

 python3.pkgs.buildPythonApplication (finalAttrs: {
  pname = "radicale";
-  version = "3.8.0";
+  version = "3.8.1";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "Kozea";
    repo = "Radicale";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-xeNiLbh2/OsivbQ9RKGCqqs/VPpBtEjj4sqXcQ9p9pw=";
+    hash = "sha256-457vXuaj+55bK4irqtzcUrbPdZY0JGAo6c1X/6QMojA=";
  };

  build-system = with python3.pkgs; [
--- a/pkgs/by-name/re/redmine/Gemfile
+++ b/pkgs/by-name/re/redmine/Gemfile
@@ -2,7 +2,7 @@ source 'https://rubygems.org'

 ruby '>= 3.2.0', '< 4.1.0'

-gem 'rails', '8.1.3.1'
+gem 'rails', '8.1.4'
 gem 'rouge', '~> 5.0'
 gem 'mini_mime', '~> 1.1.0'
 gem "actionpack-xml_parser"
--- a/pkgs/by-name/re/redmine/Gemfile.lock
+++ b/pkgs/by-name/re/redmine/Gemfile.lock
@@ -3,29 +3,29 @@ GEM
  specs:
    action_text-trix (2.1.19)
      railties
-    actioncable (8.1.3.1)
-      actionpack (= 8.1.3.1)
-      activesupport (= 8.1.3.1)
+    actioncable (8.1.4)
+      actionpack (= 8.1.4)
+      activesupport (= 8.1.4)
      nio4r (~> 2.0)
      websocket-driver (>= 0.6.1)
      zeitwerk (~> 2.6)
-    actionmailbox (8.1.3.1)
-      actionpack (= 8.1.3.1)
-      activejob (= 8.1.3.1)
-      activerecord (= 8.1.3.1)
-      activestorage (= 8.1.3.1)
-      activesupport (= 8.1.3.1)
+    actionmailbox (8.1.4)
+      actionpack (= 8.1.4)
+      activejob (= 8.1.4)
+      activerecord (= 8.1.4)
+      activestorage (= 8.1.4)
+      activesupport (= 8.1.4)
      mail (>= 2.8.0)
-    actionmailer (8.1.3.1)
-      actionpack (= 8.1.3.1)
-      actionview (= 8.1.3.1)
-      activejob (= 8.1.3.1)
-      activesupport (= 8.1.3.1)
+    actionmailer (8.1.4)
+      actionpack (= 8.1.4)
+      actionview (= 8.1.4)
+      activejob (= 8.1.4)
+      activesupport (= 8.1.4)
      mail (>= 2.8.0)
      rails-dom-testing (~> 2.2)
-    actionpack (8.1.3.1)
-      actionview (= 8.1.3.1)
-      activesupport (= 8.1.3.1)
+    actionpack (8.1.4)
+      actionview (= 8.1.4)
+      activesupport (= 8.1.4)
      nokogiri (>= 1.8.5)
      rack (>= 2.2.4)
      rack-session (>= 1.0.1)
@@ -36,36 +36,36 @@ GEM
    actionpack-xml_parser (2.0.1)
      actionpack (>= 5.0)
      railties (>= 5.0)
-    actiontext (8.1.3.1)
+    actiontext (8.1.4)
      action_text-trix (~> 2.1.15)
-      actionpack (= 8.1.3.1)
-      activerecord (= 8.1.3.1)
-      activestorage (= 8.1.3.1)
-      activesupport (= 8.1.3.1)
+      actionpack (= 8.1.4)
+      activerecord (= 8.1.4)
+      activestorage (= 8.1.4)
+      activesupport (= 8.1.4)
      globalid (>= 0.6.0)
      nokogiri (>= 1.8.5)
-    actionview (8.1.3.1)
-      activesupport (= 8.1.3.1)
+    actionview (8.1.4)
+      activesupport (= 8.1.4)
      builder (~> 3.1)
      erubi (~> 1.11)
      rails-dom-testing (~> 2.2)
      rails-html-sanitizer (~> 1.6)
-    activejob (8.1.3.1)
-      activesupport (= 8.1.3.1)
+    activejob (8.1.4)
+      activesupport (= 8.1.4)
      globalid (>= 0.3.6)
-    activemodel (8.1.3.1)
-      activesupport (= 8.1.3.1)
-    activerecord (8.1.3.1)
-      activemodel (= 8.1.3.1)
-      activesupport (= 8.1.3.1)
+    activemodel (8.1.4)
+      activesupport (= 8.1.4)
+    activerecord (8.1.4)
+      activemodel (= 8.1.4)
+      activesupport (= 8.1.4)
      timeout (>= 0.4.0)
-    activestorage (8.1.3.1)
-      actionpack (= 8.1.3.1)
-      activejob (= 8.1.3.1)
-      activerecord (= 8.1.3.1)
-      activesupport (= 8.1.3.1)
+    activestorage (8.1.4)
+      actionpack (= 8.1.4)
+      activejob (= 8.1.4)
+      activerecord (= 8.1.4)
+      activesupport (= 8.1.4)
      marcel (~> 1.0)
-    activesupport (8.1.3.1)
+    activesupport (8.1.4)
      base64
      bigdecimal
      concurrent-ruby (~> 1.0, >= 1.3.1)
@@ -88,7 +88,7 @@ GEM
    base64 (0.3.0)
    bcrypt (3.1.22)
    benchmark (0.5.0)
-    bigdecimal (4.1.2)
+    bigdecimal (4.1.3)
    builder (3.3.0)
    bullet (8.2.0)
      activesupport (>= 3.0.0)
@@ -113,8 +113,9 @@ GEM
    concurrent-ruby (1.3.8)
    connection_pool (3.0.2)
    crass (1.0.7)
-    css_parser (3.0.0)
+    css_parser (3.2.0)
      addressable
+      base64
      ssrf_filter (~> 1.5)
    csv (3.3.6)
    date (3.5.1)
@@ -129,7 +130,7 @@ GEM
    drb (2.2.3)
    erb (6.0.7)
    erubi (1.13.1)
-    faraday (2.14.3)
+    faraday (2.14.4)
      faraday-net_http (>= 2.0, < 3.5)
      json
      logger
@@ -147,14 +148,14 @@ GEM
      actionpack (>= 6.0.0)
      activesupport (>= 6.0.0)
      railties (>= 6.0.0)
-    io-console (0.9.2)
+    io-console (0.9.4)
    irb (1.18.0)
      pp (>= 0.6.0)
      prism (>= 1.3.0)
      rdoc (>= 4.0.0)
      reline (>= 0.4.2)
    json (2.21.2)
-    jwt (3.2.0)
+    jwt (3.3.0)
      base64
    language_server-protocol (3.17.0.6)
    lint_roller (1.1.0)
@@ -190,7 +191,7 @@ GEM
      bigdecimal
    net-http (0.9.1)
      uri (>= 0.11.1)
-    net-imap (0.6.6)
+    net-imap (0.6.7)
      date
      net-protocol
    net-ldap (0.20.0)
@@ -198,9 +199,9 @@ GEM
      ostruct
    net-pop (0.1.2)
      net-protocol
-    net-protocol (0.3.0)
+    net-protocol (0.4.0)
      timeout
-    net-smtp (0.5.1)
+    net-smtp (0.5.2)
      net-protocol
    nio4r (2.7.5)
    nokogiri (1.19.4)
@@ -217,7 +218,7 @@ GEM
      snaky_hash (~> 2.0, >= 2.0.7)
      version_gem (~> 1.1, >= 1.1.14)
    ostruct (0.6.3)
-    parallel (2.1.0)
+    parallel (2.2.0)
    parser (3.3.12.0)
      ast (~> 2.4.1)
      racc
@@ -242,20 +243,20 @@ GEM
      rack (>= 1.3)
    rackup (2.3.1)
      rack (>= 3)
-    rails (8.1.3.1)
-      actioncable (= 8.1.3.1)
-      actionmailbox (= 8.1.3.1)
-      actionmailer (= 8.1.3.1)
-      actionpack (= 8.1.3.1)
-      actiontext (= 8.1.3.1)
-      actionview (= 8.1.3.1)
-      activejob (= 8.1.3.1)
-      activemodel (= 8.1.3.1)
-      activerecord (= 8.1.3.1)
-      activestorage (= 8.1.3.1)
-      activesupport (= 8.1.3.1)
+    rails (8.1.4)
+      actioncable (= 8.1.4)
+      actionmailbox (= 8.1.4)
+      actionmailer (= 8.1.4)
+      actionpack (= 8.1.4)
+      actiontext (= 8.1.4)
+      actionview (= 8.1.4)
+      activejob (= 8.1.4)
+      activemodel (= 8.1.4)
+      activerecord (= 8.1.4)
+      activestorage (= 8.1.4)
+      activesupport (= 8.1.4)
      bundler (>= 1.15.0)
-      railties (= 8.1.3.1)
+      railties (= 8.1.4)
    rails-dom-testing (2.3.0)
      activesupport (>= 5.0.0)
      minitest
@@ -263,9 +264,9 @@ GEM
    rails-html-sanitizer (1.7.1)
      loofah (~> 2.25, >= 2.25.2)
      nokogiri (>= 1.15.7, != 1.16.7, != 1.16.6, != 1.16.5, != 1.16.4, != 1.16.3, != 1.16.2, != 1.16.1, != 1.16.0.rc1, != 1.16.0)
-    railties (8.1.3.1)
-      actionpack (= 8.1.3.1)
-      activesupport (= 8.1.3.1)
+    railties (8.1.4)
+      actionpack (= 8.1.4)
+      activesupport (= 8.1.4)
      irb (~> 1.13)
      rackup (>= 1.0.0)
      rake (>= 12.2)
@@ -288,17 +289,16 @@ GEM
      logger
      prism (>= 1.6.0)
      tsort
-    rdoc (8.0.0)
+    rdoc (8.1.0)
      erb
      prism (>= 1.6.0)
      rbs (>= 4.0.0)
      tsort
-    regexp_parser (2.12.0)
+    regexp_parser (2.13.1)
    reline (0.7.0)
      io-console (~> 0.5)
    requestjs-rails (0.0.14)
      railties (>= 7.1.0)
-    rexml (3.4.4)
    roadie (5.3.1)
      css_parser (>= 1.4, < 4.0)
      nokogiri (~> 1.15)
@@ -343,10 +343,9 @@ GEM
      crass (~> 1.0.2)
      nokogiri (>= 1.16.8)
    securerandom (0.4.1)
-    selenium-webdriver (4.48.0)
+    selenium-webdriver (4.50.0)
      base64 (~> 0.2)
      logger (~> 1.4)
-      rexml (~> 3.2, >= 3.2.5)
      rubyzip (>= 1.2.2, < 4.0)
      websocket (~> 1.0)
    simplecov (0.22.0)
@@ -360,7 +359,7 @@ GEM
      version_gem (~> 1.1, >= 1.1.14)
    sqlite3 (2.9.6)
      mini_portile2 (~> 2.8.0)
-    ssrf_filter (1.5.0)
+    ssrf_filter (1.6.0)
    stimulus-rails (1.3.4)
      railties (>= 6.0.0)
    strscan (3.1.8)
@@ -377,9 +376,9 @@ GEM
    tsort (0.2.0)
    tzinfo (2.0.6)
      concurrent-ruby (~> 1.0)
-    unicode-display_width (3.2.0)
-      unicode-emoji (~> 4.1)
-    unicode-emoji (4.2.0)
+    unicode-display_width (3.3.0)
+      unicode-emoji (~> 4.3)
+    unicode-emoji (4.3.0)
    uniform_notifier (1.18.0)
    uri (1.1.1)
    useragent (0.16.11)
@@ -433,7 +432,7 @@ DEPENDENCIES
  propshaft (~> 1.3.0)
  puma
  rack (>= 3.1.3)
-  rails (= 8.1.3.1)
+  rails (= 8.1.4)
  rails-dom-testing (>= 2.3.0)
  rbpdf (~> 1.21.4)
  requestjs-rails (~> 0.0.13)
--- a/pkgs/by-name/re/redmine/gemset.nix
+++ b/pkgs/by-name/re/redmine/gemset.nix
@@ -22,10 +22,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "06yrlf0a6jnlcigvnhdsdskvf368cwi0ypz2vzps6y68jn154673";
+      sha256 = "04bzm9z05dllly0yy6jpgkmd0vmdqpc2lxvdr76irq31r3w75kfg";
      type = "gem";
    };
-    version = "8.1.3.1";
+    version = "8.1.4";
  };
  actionmailbox = {
    dependencies = [
@@ -40,10 +40,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "071b1103h7xsrrx73wbdj8mp7b0x99lr6pj3ivg3m13x15r4jw2z";
+      sha256 = "1sq679wp7f18bc88svhfdbjn8kv3ia5sfglgap773dpbfzjjaicw";
      type = "gem";
    };
-    version = "8.1.3.1";
+    version = "8.1.4";
  };
  actionmailer = {
    dependencies = [
@@ -58,10 +58,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0g64lm550x0sx2ad5sgwmx19jg9acj98hih6q33a00pz50dl9sl8";
+      sha256 = "14zhp9s8cmb7scmhxmanir7syrljcdik6792iyinxr1afvb9abgq";
      type = "gem";
    };
-    version = "8.1.3.1";
+    version = "8.1.4";
  };
  actionpack = {
    dependencies = [
@@ -79,10 +79,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1l13fy0y55h5c5ccm7c94mwfhf6bk5xj83qv1d3izs288lavfk4p";
+      sha256 = "190fwdv8rx9ixr9y020szwr5nzpsh141iz768mv5l6dya7696m14";
      type = "gem";
    };
-    version = "8.1.3.1";
+    version = "8.1.4";
  };
  actionpack-xml_parser = {
    dependencies = [
@@ -112,10 +112,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1wlam4mqrxfsylsyf01yc7907ramis3kisgfn7frr8ni6gc2k9sx";
+      sha256 = "0i7nvd06ydm5x4h0pch1m9ifrqd82dqb363xzh8zjsnslyz9kvik";
      type = "gem";
    };
-    version = "8.1.3.1";
+    version = "8.1.4";
  };
  actionview = {
    dependencies = [
@@ -129,10 +129,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1dng2b5bbjm4c1bcpak7q9w4zh71mz2nkknipszl6yy42j28p9id";
+      sha256 = "0xk0487vhlkklcfcj973nnxgsryb7d12ncl8sax9m5jdgk8fzwgg";
      type = "gem";
    };
-    version = "8.1.3.1";
+    version = "8.1.4";
  };
  activejob = {
    dependencies = [
@@ -143,10 +143,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0jlm75lxj7bjd67jkgclzlrhlm9sj4ywdzngxq6z83ckvxsx538w";
+      sha256 = "16a0h9wc6nmf7k3wiq7fhi42l83g6kwgxv4vy3swiiacipnv5maf";
      type = "gem";
    };
-    version = "8.1.3.1";
+    version = "8.1.4";
  };
  activemodel = {
    dependencies = [ "activesupport" ];
@@ -154,10 +154,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "124gi0hlvkabkl5fzfn90ylj7gbyg22rv5208k8p3hxf5z705k4r";
+      sha256 = "1s50ww57lm2qysr2vryfvj1xll7pp09dnmv1y2jql4dx4z0hc2cs";
      type = "gem";
    };
-    version = "8.1.3.1";
+    version = "8.1.4";
  };
  activerecord = {
    dependencies = [
@@ -169,10 +169,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0fs0q1c35k2bh079kj1xbx9pvqx7q2z4k9d32fqgcf29iz1bcbqa";
+      sha256 = "0kxh03zk69y5nrvpky5a068kmh7a2a9r1akzplqr4v14gzm5fj9v";
      type = "gem";
    };
-    version = "8.1.3.1";
+    version = "8.1.4";
  };
  activestorage = {
    dependencies = [
@@ -186,10 +186,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1vv3c41nfsii6j2nl80mbgffld96s4ak3zfjk6jgy73v717jamgm";
+      sha256 = "1a67hni2l39ig4i91k7laqmzh9xngj3prd9jnghfaqzfr4z6z5gl";
      type = "gem";
    };
-    version = "8.1.3.1";
+    version = "8.1.4";
  };
  activesupport = {
    dependencies = [
@@ -214,10 +214,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0xhkhdx8svhaf439y398yixik0snzarnnsy43688p92yy9jqfic5";
+      sha256 = "1pw09rmd9f9x0i0ai11ajcf6c7xvi48pn8sbjf8q7z648gzd67c9";
      type = "gem";
    };
-    version = "8.1.3.1";
+    version = "8.1.4";
  };
  addressable = {
    dependencies = [ "public_suffix" ];
@@ -321,10 +321,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1g9zi8c4i7g8zz0c3hxrw6mblrjvgn7akys60clb9si7c1k1gljk";
+      sha256 = "0rng45p4vc3f6nac44cnylwch7rj4zsff3icdz6c7garwpjy3sv1";
      type = "gem";
    };
-    version = "4.1.2";
+    version = "4.1.3";
  };
  builder = {
    groups = [ "default" ];
@@ -457,16 +457,17 @@
  css_parser = {
    dependencies = [
      "addressable"
+      "base64"
      "ssrf_filter"
    ];
    groups = [ "default" ];
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "119q8j23xyb9pifka1n6jjrw04099zpwwdajh5pd10fm7wlfkw7a";
+      sha256 = "0rdcx914w5flavh54gpcd19wdqc1yp5jzqln1dflsv94cihxgng2";
      type = "gem";
    };
-    version = "3.0.0";
+    version = "3.2.0";
  };
  csv = {
    groups = [ "default" ];
@@ -591,10 +592,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0y7j6yzv07zggic6g0p2v1ivnvkzsbqjnfdl4215qqb6cxz290hq";
+      sha256 = "0vmb5wpiz7mf2r6vjvhvfp38rrfvqjzmv7m3max0s6v28j641d4v";
      type = "gem";
    };
-    version = "2.14.3";
+    version = "2.14.4";
  };
  faraday-net_http = {
    dependencies = [ "net-http" ];
@@ -714,10 +715,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "026v93kja19bfslnwi9xfq2dj4r89kkwdprim4whjg6h3n4lz9zg";
+      sha256 = "1cgvhm0d4awr8j42b8v1nl1jfgx45ihv8mylargfi3lj697k00x4";
      type = "gem";
    };
-    version = "0.9.2";
+    version = "0.9.4";
  };
  irb = {
    dependencies = [
@@ -762,10 +763,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1mqps8z4ly74hpksfajcfamqk1wb79biy187pn10knmi6zzb26al";
+      sha256 = "0ip59r7z8mjwy1rq0pp53kxhvkjb5d942rpn7hiliha1qgxk9k24";
      type = "gem";
    };
-    version = "3.2.0";
+    version = "3.3.0";
  };
  language_server-protocol = {
    groups = [
@@ -995,10 +996,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1px886qvws5zvqphy5cysj8vg01lym0w7vs9wq1h41pk1pjlxaln";
+      sha256 = "0q1nq8mx22v9sn1296s45nm6dni42y3m3s1f4pg5dn3mx4xmgjdm";
      type = "gem";
    };
-    version = "0.6.6";
+    version = "0.6.7";
  };
  net-ldap = {
    dependencies = [
@@ -1031,10 +1032,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0wklahcafcib6jwrr3angj7zzcb9csq3c0xj3axldb8w9wyhqcds";
+      sha256 = "0ly8x39gr23blbmfwfyy14lb2v9kg8bj5x0b2r2llyb4dy60rygr";
      type = "gem";
    };
-    version = "0.3.0";
+    version = "0.4.0";
  };
  net-smtp = {
    dependencies = [ "net-protocol" ];
@@ -1042,10 +1043,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0dh7nzjp0fiaqq1jz90nv4nxhc2w359d7c199gmzq965cfps15pd";
+      sha256 = "0g4gcydr0hza3wiizny0p5q4phl3fkhfsa4r5xir8bbb9p03q41m";
      type = "gem";
    };
-    version = "0.5.1";
+    version = "0.5.2";
  };
  nio4r = {
    groups = [
@@ -1120,10 +1121,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0mlkn1vhh9lr7vljibpgspwsswk7mzm8nw6bbr616c9fbj35hlmk";
+      sha256 = "1n0w07z55hsrb803sl20vcmr8hkay1lsff7c1a55ajdnsxgrq1g1";
      type = "gem";
    };
-    version = "2.1.0";
+    version = "2.2.0";
  };
  parser = {
    dependencies = [
@@ -1319,10 +1320,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0an5r7sxc6011kkalh78vp4w14ff1r6d31fmcsfbywf1pwv1mlfc";
+      sha256 = "0fx325cnd3p5s23iyqz5fr6jixq09avf7zmq64p9pdx3lbwwsgjz";
      type = "gem";
    };
-    version = "8.1.3.1";
+    version = "8.1.4";
  };
  rails-dom-testing = {
    dependencies = [
@@ -1368,10 +1369,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "11s4n3zqd7bry5ndraq02f641hskhmnfcza8lkzcw04sawra5213";
+      sha256 = "0g2qzxzxkykghafprg82dhgaw2lnf5wj4qmgd16i2csfk3lairxm";
      type = "gem";
    };
-    version = "8.1.3.1";
+    version = "8.1.4";
  };
  rainbow = {
    groups = [
@@ -1502,10 +1503,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0sf4909q2mr9z0rpygv94z12b0yamg07gz8cba2mi5k3m448rgq3";
+      sha256 = "02pn63i2r5z44hcfhxbaag9rvqsyznsliivnn7f3dzaw1a43gz5y";
      type = "gem";
    };
-    version = "8.0.0";
+    version = "8.1.0";
  };
  regexp_parser = {
    groups = [
@@ -1515,10 +1516,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1fwfw26a32rps78920nn29shqg2zmqv72i89j1fap41isshida9m";
+      sha256 = "0jxl6c5cagjz5i5n9jplhdy2izad6wapmwgfhqggb22nqfvvdvas";
      type = "gem";
    };
-    version = "2.12.0";
+    version = "2.13.1";
  };
  reline = {
    dependencies = [ "io-console" ];
@@ -1546,19 +1547,6 @@
    };
    version = "0.0.14";
  };
-  rexml = {
-    groups = [
-      "default"
-      "test"
-    ];
-    platforms = [ ];
-    source = {
-      remotes = [ "https://rubygems.org" ];
-      sha256 = "0hninnbvqd2pn40h863lbrn9p11gvdxp928izkag5ysx8b1s5q0r";
-      type = "gem";
-    };
-    version = "3.4.4";
-  };
  roadie = {
    dependencies = [
      "css_parser"
@@ -1774,7 +1762,6 @@
    dependencies = [
      "base64"
      "logger"
-      "rexml"
      "rubyzip"
      "websocket"
    ];
@@ -1782,10 +1769,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "153s0z9dwgmkf3imvlhwc546g9yfrpnfcvzy8f9qg950r3mpd0qc";
+      sha256 = "1jqg0v5xcl0n4iwja8918nfbp9wn93pqsszd512g8fn3bc198byi";
      type = "gem";
    };
-    version = "4.48.0";
+    version = "4.50.0";
  };
  simplecov = {
    dependencies = [
@@ -1861,10 +1848,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "1xlpb8y555frl82cx4q2i922mps36mmn0ajk21kpy3bks6wwsgg0";
+      sha256 = "16grvk48dxx5wljmzfcnpmb6a3mrrg0sj4kgyhqwk183dp15plbq";
      type = "gem";
    };
-    version = "1.5.0";
+    version = "1.6.0";
  };
  stimulus-rails = {
    dependencies = [ "railties" ];
@@ -1989,10 +1976,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "0hiwhnqpq271xqari6mg996fgjps42sffm9cpk6ljn8sd2srdp8c";
+      sha256 = "04xnl0zwpjjvxipd6rdnxkm11pfhbhhi3179yzv51nqi9dmacyjb";
      type = "gem";
    };
-    version = "3.2.0";
+    version = "3.3.0";
  };
  unicode-emoji = {
    groups = [
@@ -2002,10 +1989,10 @@
    platforms = [ ];
    source = {
      remotes = [ "https://rubygems.org" ];
-      sha256 = "03zqn207zypycbz5m9mn7ym763wgpk7hcqbkpx02wrbm1wank7ji";
+      sha256 = "1kp89lja8ii7l6f0bq5vdxq1p3kxr3a2qmmhdc38qdwh6akjzh0i";
      type = "gem";
    };
-    version = "4.2.0";
+    version = "4.3.0";
  };
  uniform_notifier = {
    groups = [
--- a/pkgs/by-name/re/redmine/package.nix
+++ b/pkgs/by-name/re/redmine/package.nix
@@ -16,7 +16,7 @@
 }:

 let
-  version = "7.0.1";
+  version = "7.0.2";
  rubyEnv = bundlerEnv {
    name = "redmine-env-${version}";

@@ -73,7 +73,7 @@ stdenvNoCC.mkDerivation (finalAttrs: {

  src = fetchurl {
    url = "https://www.redmine.org/releases/redmine-${finalAttrs.version}.tar.gz";
-    hash = "sha256-aFOLQxD6UKx5pSEEXLVf47z/7VwVYtaETPkOZudhkgk=";
+    hash = "sha256-1F5tTDc8w8jTPx9NSi/64eGtsYcDFgcHRnST3ntL5ZE=";
  };

  nativeBuildInputs = [ makeWrapper ];
--- a/pkgs/by-name/ru/rust-analyzer-unwrapped/package.nix
+++ b/pkgs/by-name/ru/rust-analyzer-unwrapped/package.nix
@@ -13,15 +13,15 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "rust-analyzer-unwrapped";
-  version = "2026-09-21";
+  version = "2026-09-28";

-  cargoHash = "sha256-9f66oV3CyRS7y43JoLc+bf2D6P/EHKKpdpWQrgJ4TyI=";
+  cargoHash = "sha256-pCbofUTBCIRID5icso1SKdMNjO8Eowy2c/pVBJplaqY=";

  src = fetchFromGitHub {
    owner = "rust-lang";
    repo = "rust-analyzer";
    rev = finalAttrs.version;
-    hash = "sha256-EKsvvSydG/DQnd6diQhQhrhJs1pzPWTDoHA36RO8nWk=";
+    hash = "sha256-j8y/AO3AMDF9p+11aIDhnA21JnNj5PjvcejTI43vI8Q=";
  };

  cargoBuildFlags = [
--- a/pkgs/by-name/se/selene/package.nix
+++ b/pkgs/by-name/se/selene/package.nix
@@ -9,16 +9,16 @@

 rustPlatform.buildRustPackage (finalAttrs: {
  pname = "selene";
-  version = "0.31.0";
+  version = "0.32.0";

  src = fetchFromGitHub {
    owner = "kampfkarren";
    repo = "selene";
    tag = finalAttrs.version;
-    hash = "sha256-1VxFhr/PxMVQktf1pfhCPEnEi9RF2nTM4p8vYJnPLAk=";
+    hash = "sha256-uTeUEYVQ/bfLP98+gqRlZdqQxyTAeUW0+14ftl7Mfcw=";
  };

-  cargoHash = "sha256-Hv/2F3xBbnYw6GAMUd7nYyZl7pTIuQlgGh6+r3OFglw=";
+  cargoHash = "sha256-jJJgwzvnyv8W/OBiOne/Kf+DzagDJSUBCRCZIPcWlII=";

  nativeBuildInputs = lib.optionals robloxSupport [
    pkg-config
--- a/pkgs/by-name/si/signal-desktop/package.nix
+++ b/pkgs/by-name/si/signal-desktop/package.nix
@@ -9,7 +9,7 @@
  fetchPnpmDeps,
  pnpmConfigHook,
  pnpmBuildHook,
-  electron_43,
+  electron_44,
  python3,
  makeWrapper,
  callPackage,
@@ -34,7 +34,7 @@ assert lib.warnIf (commandLineArgs != "")
 let
  nodejs = nodejs_24;
  pnpm = pnpm_11;
-  electron = electron_43;
+  electron = electron_44;

  libsignal-node = callPackage ./libsignal-node.nix { inherit nodejs; };
  signal-sqlcipher = callPackage ./signal-sqlcipher.nix {
@@ -45,13 +45,13 @@ let
  webrtc = callPackage ./webrtc.nix { };
  ringrtc = callPackage ./ringrtc.nix { inherit webrtc; };

-  version = "8.26.0";
+  version = "8.28.0";

  src = fetchFromGitHub {
    owner = "signalapp";
    repo = "Signal-Desktop";
    tag = "v${version}";
-    hash = "sha256-GgNFy7ZNft4rwTmS+OGp4eis6izlc7RGubnmSc8OeKc=";
+    hash = "sha256-zQQ5z9abHoVSYt9d/buN7G9gsG+JhaBW1xgcja98iZI=";
    # Emoji font files will be added in `postFetch` if `withAppleEmojis` is enabled. They
    # are fetched separately below.
    postFetch = ''
@@ -84,7 +84,7 @@ let
        pnpm config set fetch-timeout 300000
      '';
      fetcherVersion = 4;
-      hash = "sha256-9LC62SFDnP4GMDqsP8NcSiACUA+BkPwnbdmNnvJ8gKg=";
+      hash = "sha256-vYMT1yBAZ+ABQN9KXfBX4j08i3xKw5BUfpG2kYqs8MY=";
    };

    strictDeps = true;
@@ -191,7 +191,7 @@ stdenv.mkDerivation (finalAttrs: {
      pnpm config set fetch-timeout 300000
    '';
    fetcherVersion = 4;
-    hash = "sha256-9LC62SFDnP4GMDqsP8NcSiACUA+BkPwnbdmNnvJ8gKg=";
+    hash = "sha256-vYMT1yBAZ+ABQN9KXfBX4j08i3xKw5BUfpG2kYqs8MY=";
  };

  env = {
@@ -199,7 +199,7 @@ stdenv.mkDerivation (finalAttrs: {
    SIGNAL_ENV = "production";
    # Signal enforces that builds expire 90 days after the last source code change to disallow sending messages from older versions.
    # We set the source-changed date to match the corresponding upstream release date.
-    SOURCE_DATE_EPOCH = 1788454304;
+    SOURCE_DATE_EPOCH = 1790198139;
  };

  preBuild = ''
--- a/pkgs/by-name/sv/svt-av1-hdr/package.nix
+++ b/pkgs/by-name/sv/svt-av1-hdr/package.nix
@@ -13,13 +13,13 @@

 stdenv.mkDerivation (finalAttrs: {
  pname = "svt-av1-hdr";
-  version = "4.1.0";
+  version = "4.2.0";

  src = fetchFromGitHub {
    owner = "juliobbv-p";
    repo = "svt-av1-hdr";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-n66RPDTfBsPCR/4y8dpU3Au1WZHpkpln899e2+LKxto=";
+    hash = "sha256-axJ4C2gSQMdiGo6qLNxaQ5AWUuZp6gRnEI8Bx0B7tlw=";
  };

  strictDeps = true;
--- a/pkgs/by-name/sy/syft/package.nix
+++ b/pkgs/by-name/sy/syft/package.nix
@@ -8,13 +8,13 @@

 buildGoModule (finalAttrs: {
  pname = "syft";
-  version = "1.52.0";
+  version = "1.54.0";

  src = fetchFromGitHub {
    owner = "anchore";
    repo = "syft";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-05jrSB9uCfmZehZysc7Wx8R+GUsbBLrOGG67EBzq30A=";
+    hash = "sha256-pVSroq42pXaGpbjY1iVR+1FoVLReJ08ilhlgG+ad2CQ=";
    # populate values that require us to use git. By doing this in postFetch we
    # can delete .git afterwards and maintain better reproducibility of the src.
    leaveDotGit = true;
@@ -29,7 +29,7 @@ buildGoModule (finalAttrs: {
  # hash mismatch with darwin
  proxyVendor = true;

-  vendorHash = "sha256-leoR5svdqksDWNmT6fLirXGMCCYqg3ZXpJ8gVhl+tis=";
+  vendorHash = "sha256-v2fxDkpz0Jq+J1vBNwxEwXVwW7z5CwB4qy0NoZd+gzI=";

  nativeBuildInputs = [ installShellFiles ];

--- a/pkgs/by-name/ya/yazi/plugins/clipboard/default.nix
+++ b/pkgs/by-name/ya/yazi/plugins/clipboard/default.nix
@@ -5,13 +5,13 @@
 }:
 mkYaziPlugin {
  pname = "clipboard.yazi";
-  version = "0-unstable-2026-08-27";
+  version = "0-unstable-2026-09-25";

  src = fetchFromGitHub {
    owner = "XYenon";
    repo = "clipboard.yazi";
-    rev = "b25ec9697df1855634dc98d225a436d9c6783cec";
-    hash = "sha256-zrlwx26aiCeWBWTcZQ+IlxjI6W2neg7kNyq7CHnTRk0=";
+    rev = "a2655fde94dbbea56aa0230a300ab64503df53f4";
+    hash = "sha256-Jh8mZQjU5bzo9yly36M6b3Jfz4bIUdMSIS43VM/i/j4=";
  };

  meta = {
--- a/pkgs/by-name/ya/yazi/plugins/mime-ext/default.nix
+++ b/pkgs/by-name/ya/yazi/plugins/mime-ext/default.nix
@@ -5,13 +5,13 @@
 }:
 mkYaziPlugin {
  pname = "mime-ext.yazi";
-  version = "0-unstable-2026-09-01";
+  version = "0-unstable-2026-09-30";

  src = fetchFromGitHub {
    owner = "yazi-rs";
    repo = "plugins";
-    rev = "4dc7f1b6458c2578f4494f10d468c68c1082214f";
-    hash = "sha256-BSAOkL4H4LVMbTRFv4kzGGRpLgtKkfNTEsDH2EQ219Q=";
+    rev = "33dde2872cee694543fe37619628a9005921c52c";
+    hash = "sha256-r6a/6yNTrLcHlpPrIjNDGOf0u+ZXUUIX4QbV35Ib+jw=";
  };

  meta = {
--- a/pkgs/by-name/zi/zigbee2mqtt/package.nix
+++ b/pkgs/by-name/zi/zigbee2mqtt/package.nix
@@ -14,20 +14,20 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
  pname = "zigbee2mqtt";
-  version = "2.14.1";
+  version = "2.14.2";

  src = fetchFromGitHub {
    owner = "Koenkk";
    repo = "zigbee2mqtt";
    tag = finalAttrs.version;
-    hash = "sha256-/yU/eMWDm6kdy4z8IYGNx+7fP33c/tmaCP+Yn5LDohc=";
+    hash = "sha256-az/mbrflILDWSu3kIA280dJWqTlImh1s7FvHeu/DKe4=";
  };

  pnpmDeps = fetchPnpmDeps {
    inherit (finalAttrs) pname version src;
    pnpm = pnpm_10;
    fetcherVersion = 4;
-    hash = "sha256-1OUS58Eo4NVREvMuYCKTY2gOG+o43/Ix8Qs3Bh3zrO8=";
+    hash = "sha256-D4qF40ZyyqHjveLvu56Vy6lRJF6LxxhU+79KlfLYhN4=";
  };

  nativeBuildInputs = [
--- a/pkgs/by-name/zo/zoom-us/package.nix
+++ b/pkgs/by-name/zo/zoom-us/package.nix
@@ -54,20 +54,20 @@ let
  # Zoom versions are released at different times per platform and often with different versions.
  # We write them on three lines like this (rather than using {}) so that the updater script can
  # find where to edit them.
-  versions.aarch64-darwin = "7.1.5.84650";
+  versions.aarch64-darwin = "7.2.2.88465";

  # This is the fallback version so that evaluation can produce a meaningful result.
-  versions.x86_64-linux = "7.1.5.4332";
+  versions.x86_64-linux = "7.2.1.5760";

  srcs = {
    aarch64-darwin = fetchurl {
      url = "https://zoom.us/client/${versions.aarch64-darwin}/zoomusInstallerFull.pkg?archType=arm64";
      name = "zoomusInstallerFull.pkg";
-      hash = "sha256-Sc9wr2dBdvNwi507UZ9YVCTEQsz3RP2WWTJ5Z5ccgnk=";
+      hash = "sha256-/xXZJu9acUxmg8wj7WKKfC/EPQgKiKxUr04gC6A6JFY=";
    };
    x86_64-linux = fetchurl {
      url = "https://zoom.us/client/${versions.x86_64-linux}/zoom_x86_64.pkg.tar.xz";
-      hash = "sha256-5znZNrySgRrs9I5zhqN5p5dPfXpEHXKf8o2dWeYTPso=";
+      hash = "sha256-Nuh5j0L1bqinPHcqrFlKMPFqGqTRUdYVdrPcgufS5Qo=";
    };
  };

@@ -181,8 +181,9 @@ let
      pkgs.pipewire
      pkgs.qt6.qtbase
      pkgs.qt6.qtdeclarative
-      pkgs.stdenv.cc.cc
+      pkgs.stdenv.cc.cc.lib # only libstdc++, libatomic and libgomp are needed at runtime
      pkgs.udev
+      pkgs.util-linux.lib # provides libuuid.so.1, which Zoom 7.2 links against
      pkgs.wayland
      pkgs.libx11
      pkgs.libxcomposite
--- a/pkgs/development/libraries/mesa/default.nix
+++ b/pkgs/development/libraries/mesa/default.nix
@@ -201,6 +201,10 @@ stdenv.mkDerivation (finalAttrs: {
  mesonFlags = [
    "--sysconfdir=/etc"

+    # Disable debug assertions for performance/compatibility
+    # https://gitlab.freedesktop.org/mesa/mesa/-/blob/main/docs/meson.rst?ref_type=heads#options
+    (lib.mesonBool "b_ndebug" true)
+
    # What to build
    (lib.mesonOption "platforms" (lib.concatStringsSep "," eglPlatforms))
    (lib.mesonOption "gallium-drivers" (lib.concatStringsSep "," galliumDrivers))
--- a/pkgs/development/python-modules/bluemaestro-ble/default.nix
+++ b/pkgs/development/python-modules/bluemaestro-ble/default.nix
@@ -10,16 +10,16 @@
  sensor-state-data,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "bluemaestro-ble";
-  version = "1.0.0";
+  version = "1.2.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "Bluetooth-Devices";
    repo = "bluemaestro-ble";
-    tag = "v${version}";
-    hash = "sha256-H7VAidnClMA/Qmc4ahzrmSaqkWj50zMjfakRD0wX8xM=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-Uz4JE7ALfHxmdi7OesdJZqp4JhQdQGNwoiDxZyk8g9c=";
  };

  build-system = [ poetry-core ];
@@ -40,8 +40,8 @@ buildPythonPackage rec {
  meta = {
    description = "Library for bluemaestro BLE devices";
    homepage = "https://github.com/Bluetooth-Devices/bluemaestro-ble";
-    changelog = "https://github.com/Bluetooth-Devices/bluemaestro-ble/blob/v${version}/CHANGELOG.md";
+    changelog = "https://github.com/Bluetooth-Devices/bluemaestro-ble/blob/${finalAttrs.src.tag}/CHANGELOG.md";
    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [ fab ];
  };
-}
+})
--- a/pkgs/development/python-modules/boto3-stubs/default.nix
+++ b/pkgs/development/python-modules/boto3-stubs/default.nix
@@ -358,13 +358,13 @@

 buildPythonPackage (finalAttrs: {
  pname = "boto3-stubs";
-  version = "1.43.106";
+  version = "1.43.107";
  pyproject = true;

  src = fetchPypi {
    pname = "boto3_stubs";
    inherit (finalAttrs) version;
-    hash = "sha256-3n8ecmhy4YdT0abrcVqTB66NX+4A72tdRD5NJGQKlQw=";
+    hash = "sha256-+MPGb7uDgyVMTnbfcWS4MBdPVPQKdAZqtjjd7rBynWM=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/mypy-boto3/default.nix
+++ b/pkgs/development/python-modules/mypy-boto3/default.nix
@@ -227,8 +227,8 @@ in
      "sha256-dcBm0aFySX9u7mKe1+RHl4faTkkpGU65ef6ocxGAXhk=";

  mypy-boto3-cloudfront =
-    buildMypyBoto3Package "cloudfront" "1.43.76"
-      "sha256-ODAlvUNrCOza4oMMwhSnO2xBuUMoqMjCxmNBPkTk/jY=";
+    buildMypyBoto3Package "cloudfront" "1.43.107"
+      "sha256-arisHkbfGkst1hHDxlaZkuxKmAq84C1os84Gyd3nRVU=";

  mypy-boto3-cloudhsm =
    buildMypyBoto3Package "cloudhsm" "1.43.0"
@@ -443,8 +443,8 @@ in
      "sha256-dXNkOcMonYrBh4yzeubd+v3mW42s9XpmpfvgbtgoJgY=";

  mypy-boto3-ec2 =
-    buildMypyBoto3Package "ec2" "1.43.105"
-      "sha256-hk8TL5vu7EKGK7mbXDRvqfwUxmuH91BgQ24UCzv7Lr0=";
+    buildMypyBoto3Package "ec2" "1.43.107"
+      "sha256-yPaNiXFYKoJikL7PTgy/JuJaZEUT1z9y72FcH5cMxKA=";

  mypy-boto3-ec2-instance-connect =
    buildMypyBoto3Package "ec2-instance-connect" "1.43.0"
@@ -594,8 +594,8 @@ in
      "sha256-CwJHIk9zxgHWBrVyPjWbt1qnnHBsLMdImmq7mEoNq9k=";

  mypy-boto3-health =
-    buildMypyBoto3Package "health" "1.43.0"
-      "sha256-UHDodWN6MLV54LA31Pc7vlMr7a0tVrmCfVjXl96cjsE=";
+    buildMypyBoto3Package "health" "1.43.107"
+      "sha256-uJn2bbgmG2jQEppJuwcYyvaedAzwzrY6otdtSUcCxXA=";

  mypy-boto3-healthlake =
    buildMypyBoto3Package "healthlake" "1.43.83"
@@ -1070,8 +1070,8 @@ in
      "sha256-YrrEKl3aGz//5Z5JGapHhWtk6hBXQ4cuRQmLqGYztzg=";

  mypy-boto3-quicksight =
-    buildMypyBoto3Package "quicksight" "1.43.100"
-      "sha256-BNMNYphV2CZ4PgNGFGJv8l4Kh3WFMl/Xru9fXeB+YGQ=";
+    buildMypyBoto3Package "quicksight" "1.43.107"
+      "sha256-UswiHENprE6eMkvExFagOhJdJdFj60yFcJbawFX/aKE=";

  mypy-boto3-ram =
    buildMypyBoto3Package "ram" "1.43.0"
@@ -1170,8 +1170,8 @@ in
      "sha256-T+JIJpHxD7IzAwq8yxgq6zbVMj/btpbhKnylMyfFvvU=";

  mypy-boto3-sagemaker =
-    buildMypyBoto3Package "sagemaker" "1.43.106"
-      "sha256-w5LD6KxXsM0MNYcGUTCoEfTGX3PAr6OrSDLKPp8NNo4=";
+    buildMypyBoto3Package "sagemaker" "1.43.107"
+      "sha256-Rt5bp4d4jw37vS4FBiTKpicBaICOFP4ONhIGB53Bdik=";

  mypy-boto3-sagemaker-a2i-runtime =
    buildMypyBoto3Package "sagemaker-a2i-runtime" "1.43.0"
@@ -1218,8 +1218,8 @@ in
      "sha256-Jl7i/d+dPkKuOWhWJft4YaU5EQ2OMkNyhHwOHL1mayA=";

  mypy-boto3-securityhub =
-    buildMypyBoto3Package "securityhub" "1.43.66"
-      "sha256-zuv74XGZqO0OXvAKw2yCd48PgFrmZilmqEPOJrTTPu0=";
+    buildMypyBoto3Package "securityhub" "1.43.107"
+      "sha256-E1Ao5BWXgXa9PEJB4hWvAvboPRxQJJqtd2yuT5D5iCg=";

  mypy-boto3-securitylake =
    buildMypyBoto3Package "securitylake" "1.43.0"
@@ -1366,8 +1366,8 @@ in
      "sha256-tiBz8d9cXwrI+7rsE+MnQzyt3BaXJ86Sd8ysVsRruwE=";

  mypy-boto3-transfer =
-    buildMypyBoto3Package "transfer" "1.43.105"
-      "sha256-lv1/qr76JhY1r5SaBgjDRqaQ84VnRbH0/5mBh53Cz+8=";
+    buildMypyBoto3Package "transfer" "1.43.107"
+      "sha256-W6eSqx0kwnKxs+WjMBplC/uUpeyKI1XxzCNfhXB5/zQ=";

  mypy-boto3-translate =
    buildMypyBoto3Package "translate" "1.43.0"
--- a/pkgs/development/python-modules/neopool-modbus/default.nix
+++ b/pkgs/development/python-modules/neopool-modbus/default.nix
@@ -11,7 +11,7 @@

 buildPythonPackage (finalAttrs: {
  pname = "neopool-modbus";
-  version = "4.8.0";
+  version = "4.9.0";
  pyproject = true;

  disabled = pythonOlder "3.13";
@@ -20,7 +20,7 @@ buildPythonPackage (finalAttrs: {
    owner = "svasek";
    repo = "python-neopool-modbus";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-6m67J+wbcfpgRkSdXeu9zbJ4a/aAdogy2Qhe7iXSkKg=";
+    hash = "sha256-ns7ZyoX+YqssfQ8FFX0j8WTjjXi1EDDK9EVJGxW3LEM=";
  };

  build-system = [ hatchling ];
--- a/pkgs/development/python-modules/nibe/default.nix
+++ b/pkgs/development/python-modules/nibe/default.nix
@@ -18,14 +18,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "nibe";
-  version = "2.24.0";
+  version = "2.25.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "yozik04";
    repo = "nibe";
    tag = finalAttrs.version;
-    hash = "sha256-LIGwxo82UrPXC6qh7pvhnhAbC5XzDPADFun5rADDASo=";
+    hash = "sha256-KilNRw/pO0a/x75yCUic58wyf7AD2sFyax+jk+mdxQc=";
  };

  pythonRelaxDeps = [ "async-modbus" ];
--- a/pkgs/development/python-modules/onvif-python/default.nix
+++ b/pkgs/development/python-modules/onvif-python/default.nix
@@ -11,7 +11,7 @@

 buildPythonPackage (finalAttrs: {
  pname = "onvif-python";
-  version = "0.4.0";
+  version = "0.4.1";
  pyproject = true;

  __structuredAttrs = true;
@@ -20,7 +20,7 @@ buildPythonPackage (finalAttrs: {
    owner = "nirsimetri";
    repo = "onvif-python";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-DLjiu6/o3iBcQjKlSAgDjd4FYfz2A3yDYZ84j8kMyzM=";
+    hash = "sha256-IJWgTXNKiMrRSojThtxH0Qs3sRVCrViCXgX0nTkmySM=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/pygitguardian/default.nix
+++ b/pkgs/development/python-modules/pygitguardian/default.nix
@@ -16,14 +16,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "pygitguardian";
-  version = "1.34.0";
+  version = "1.35.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "GitGuardian";
    repo = "py-gitguardian";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-vjD4RZSV1CN7QaYJYrs/K+2Ax+Mac27bTJ4SQJQHEgU=";
+    hash = "sha256-AJ4efKUNBImBBiEFTDAW9YxPLzhhuHJBQTFfUiZZbrs=";
  };

  build-system = [ pdm-backend ];
--- a/pkgs/development/python-modules/sfrbox-api/default.nix
+++ b/pkgs/development/python-modules/sfrbox-api/default.nix
@@ -1,30 +1,39 @@
 {
  lib,
  aiohttp,
+  aiointercept,
  aioresponses,
  buildPythonPackage,
  click,
  defusedxml,
  fetchFromGitHub,
  mashumaro,
-  poetry-core,
+  pyprojectVersionPatchHook,
  pytest-asyncio,
  pytestCheckHook,
+  uv-build,
 }:

-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
  pname = "sfrbox-api";
-  version = "0.1.1";
+  version = "0.1.2";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "hacf-fr";
    repo = "sfrbox-api";
-    tag = "v${version}";
-    hash = "sha256-hK4d9wy2+wUp8elEHW0suu9frYPNnwFUlIRvjTXfRkc=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-yyfCc36egn5qKZwPpWTndfq0ShacEEEV2PW8FMzjF6k=";
  };

-  build-system = [ poetry-core ];
+  postPatch = ''
+    substituteInPlace pyproject.toml \
+      --replace-fail "uv_build>=0.12.21,<0.13" "uv_build"
+  '';
+
+  build-system = [ uv-build ];
+
+  nativeBuildInputs = [ pyprojectVersionPatchHook ];

  dependencies = [
    aiohttp
@@ -37,20 +46,21 @@ buildPythonPackage rec {
  };

  nativeCheckInputs = [
+    aiointercept
    aioresponses
    pytest-asyncio
    pytestCheckHook
  ]
-  ++ lib.concatAttrValues optional-dependencies;
+  ++ lib.flatten (builtins.attrValues finalAttrs.passthru.optional-dependencies);

  pythonImportsCheck = [ "sfrbox_api" ];

  meta = {
    description = "Module for the SFR Box API";
    homepage = "https://github.com/hacf-fr/sfrbox-api";
-    changelog = "https://github.com/hacf-fr/sfrbox-api/releases/tag/${src.tag}";
+    changelog = "https://github.com/hacf-fr/sfrbox-api/releases/tag/${finalAttrs.src.tag}";
    license = lib.licenses.mit;
    maintainers = with lib.maintainers; [ fab ];
    mainProgram = "sfrbox-api";
  };
-}
+})
--- a/pkgs/development/python-modules/slack-sdk/default.nix
+++ b/pkgs/development/python-modules/slack-sdk/default.nix
@@ -18,14 +18,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "slack-sdk";
-  version = "3.44.1";
+  version = "3.45.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "slackapi";
    repo = "python-slack-sdk";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-fQJxh5AMu3/a7k6U6GS7uxJF1o27d/GgO1Lm35wX3rU=";
+    hash = "sha256-52v2IiTn2AdTcA0ZEEh6E0PP0/yfU6ULzHjBZ8hFk/g=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/tagoio-sdk/default.nix
+++ b/pkgs/development/python-modules/tagoio-sdk/default.nix
@@ -15,14 +15,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "tagoio-sdk";
-  version = "5.1.6";
+  version = "5.1.7";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "tago-io";
    repo = "sdk-python";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-OuNFvof1oyaVCCQ2Rx2DPLBOPX7zQ2uXQPRS215nHxE=";
+    hash = "sha256-dvGnl57bYHyUq8cO1XEPhYeTMvyj0t6NTKaz+95XaBc=";
  };

  pythonRelaxDeps = [ "requests" ];
--- a/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix
+++ b/pkgs/development/python-modules/tencentcloud-sdk-python/default.nix
@@ -9,14 +9,14 @@

 buildPythonPackage (finalAttrs: {
  pname = "tencentcloud-sdk-python";
-  version = "3.1.184";
+  version = "3.1.185";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "TencentCloud";
    repo = "tencentcloud-sdk-python";
    tag = finalAttrs.version;
-    hash = "sha256-4+4r7QAto7oqicN6wEJ4sh3IoLRnBlI+U/jmDPfEW50=";
+    hash = "sha256-SUH3UAM+K4afoV7pPM0p6Y4SMSa9GP2e2V3irywCMbA=";
  };

  build-system = [ setuptools ];
--- a/pkgs/development/python-modules/zamg/default.nix
+++ b/pkgs/development/python-modules/zamg/default.nix
@@ -13,14 +13,14 @@

 buildPythonPackage rec {
  pname = "zamg";
-  version = "0.4.1";
+  version = "0.4.2";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "killer0071234";
    repo = "python-zamg";
    tag = "v${version}";
-    hash = "sha256-kWdSXaD7+c7UrlRP47DjKbmVTHqWUveDowIDFSK3Plk=";
+    hash = "sha256-H5YG4Qg72c/wLFErWdC6xpPNnOIuye+4CimOItSFVZU=";
  };

  pythonRelaxDeps = [ "async-timeout" ];
--- a/pkgs/development/rocm-modules/clr/default.nix
+++ b/pkgs/development/rocm-modules/clr/default.nix
@@ -129,22 +129,22 @@ stdenv.mkDerivation (finalAttrs: {
  separateDebugInfo = true;

  cmakeFlags = [
-    "-DCMAKE_POLICY_DEFAULT_CMP0072=NEW" # Prefer newer OpenGL libraries
-    "-DCLR_BUILD_HIP=ON"
-    "-DCLR_BUILD_OCL=ON"
-    "-DHIP_COMMON_DIR=${hip-common}"
-    "-DHIPCC_BIN_DIR=${hipcc}/bin"
-    "-DHIP_PLATFORM=amd"
-    "-DPROF_API_HEADER_PATH=${roctracer.src}/inc/ext"
-    "-DROCM_PATH=${rocminfo}"
-    "-DBUILD_ICD=ON"
-    "-DAMD_ICD_LIBRARY_DIR=${khronos-ocl-icd-loader}"
+    (lib.cmakeFeature "CMAKE_POLICY_DEFAULT_CMP0072" "NEW") # Prefer newer OpenGL libraries
+    (lib.cmakeBool "CLR_BUILD_HIP" true)
+    (lib.cmakeBool "CLR_BUILD_OCL" true)
+    (lib.cmakeFeature "HIP_COMMON_DIR" hip-common.outPath)
+    (lib.cmakeFeature "HIPCC_BIN_DIR" "${hipcc}/bin")
+    (lib.cmakeFeature "HIP_PLATFORM" "amd")
+    (lib.cmakeFeature "PROF_API_HEADER_PATH" "${roctracer.src}/inc/ext")
+    (lib.cmakeFeature "ROCM_PATH" rocminfo.outPath)
+    (lib.cmakeBool "BUILD_ICD" true)
+    (lib.cmakeFeature "AMD_ICD_LIBRARY_DIR" khronos-ocl-icd-loader.outPath)

    # Temporarily set variables to work around upstream CMakeLists issue
    # Can be removed once https://github.com/ROCm/rocm-cmake/issues/121 is fixed
-    "-DCMAKE_INSTALL_BINDIR=bin"
-    "-DCMAKE_INSTALL_INCLUDEDIR=include"
-    "-DCMAKE_INSTALL_LIBDIR=lib"
+    (lib.cmakeFeature "CMAKE_INSTALL_BINDIR" "bin")
+    (lib.cmakeFeature "CMAKE_INSTALL_INCLUDEDIR" "include")
+    (lib.cmakeFeature "CMAKE_INSTALL_LIBDIR" "lib")
  ];

  env.LLVM_DIR = "";
@@ -162,19 +162,29 @@ stdenv.mkDerivation (finalAttrs: {
  postPatch = ''
    patchShebangs hipamd/*.sh
    patchShebangs hipamd/src
-
-    # We're not on Windows so these are never installed to hipcc...
+  ''
+  # We're not on Windows so these are never installed to hipcc...
+  + ''
    substituteInPlace hipamd/CMakeLists.txt \
      --replace-fail "install(PROGRAMS \''${HIPCC_BIN_DIR}/hipcc.bat DESTINATION bin)" "" \
      --replace-fail "install(PROGRAMS \''${HIPCC_BIN_DIR}/hipconfig.bat DESTINATION bin)" ""
-
+  ''
+  + ''
    substituteInPlace hipamd/src/hip_embed_pch.sh \
      --replace-fail "\''$LLVM_DIR/bin/clang" "${hipClangPath}/clang" \
      --replace-fail "\''$LLVM_DIR/bin/llvm-mc" "${lib.getExe' llvm.bintools.bintools "llvm-mc"}"
-
+  ''
+  + ''
    substituteInPlace opencl/khronos/icd/loader/icd_platform.h \
      --replace-fail '#define ICD_VENDOR_PATH "/etc/OpenCL/vendors/";' \
                     '#define ICD_VENDOR_PATH "/run/opengl-driver/etc/OpenCL/vendors/";'
+  ''
+  # HIP defines __noinline__ as an empty macro for host compilers, which breaks
+  # [[__gnu__::__noinline__]] in libstdc++ 16's <format>
+  # https://github.com/ROCm/rocm-systems/pull/12596
+  + ''
+    substituteInPlace hipamd/include/hip/amd_detail/host_defines.h \
+      --replace-fail $'#define __noinline__\n' ""
  '';

  postInstall = ''
--- a/pkgs/development/rocq-modules/VST/default.nix
+++ b/pkgs/development/rocq-modules/VST/default.nix
@@ -38,6 +38,7 @@ mkCoqDerivation {
    in
    with lib.versions;
    lib.switch coq.coq-version [
+      (case (range "9.1" "9.2") "2.17")
      (case (range "9.0" "9.1") "2.16")
      (case (range "8.19" "8.20") "2.15")
      (case (range "8.15" "8.19") "2.14")
@@ -46,6 +47,7 @@ mkCoqDerivation {
      (case (range "8.13" "8.15") "2.9")
      (case (range "8.12" "8.13") "2.8")
    ] null;
+  release."2.17".hash = "sha256-iDrX3uA6yOilwtg/9hIVx7e9U18pA2h5TXBh0bvBQkY=";
  release."2.16".hash = "sha256-/IlFLiojtuENHE9d+j55Z2rYw5HUkltwVim75w/UFVE=";
  release."2.15".hash = "sha256-51k2W4efMaEO4nZ0rdkRT9rA8ZJLpot1YpFmd6RIAXw=";
  release."2.14".hash = "sha256-NHc1ZQ2VmXZy4lK2+mtyeNz1Qr9Nhj2QLxkPhhQB7Iw=";
--- a/pkgs/development/rocq-modules/compcert/default.nix
+++ b/pkgs/development/rocq-modules/compcert/default.nix
@@ -46,6 +46,7 @@ let
      in
      with lib.versions;
      lib.switch coq.version [
+        (case (range "8.15" "9.2") "3.18")
        (case (range "8.15" "9.1") "3.17")
        (case (range "8.14" "8.20") "3.15")
        (case (isEq "8.13") "3.10")
@@ -65,6 +66,7 @@ let
      "3.15".hash = "sha256-QFTueGZd0hAWUj+c5GZL/AyNpfN4FuJiIzCICmwRXJ8=";
      "3.16".hash = "sha256-Ep8bcSFs3Cu+lV5qgo89JJU2vh4TTq66Or0c4evo3gM=";
      "3.17".hash = "sha256-RRc39FUe2sHQdO/ybwA3B7o31qfxcUkgah6I20i0ElE=";
+      "3.18".hash = "sha256-WadkhdtAgh+Tz8RxHT7NEV8RMeBBXxzJ1pLQPs94vfo=";
    };

    strictDeps = true;
@@ -333,6 +335,19 @@ let
              })
            ];
          }
+          {
+            cases = [
+              (_: true)
+              (isEq "3.18")
+            ];
+            out = [
+              # Fix version number
+              (fetchpatch {
+                url = "https://github.com/AbsInt/CompCert/commit/8135de0cc006f094e4a96aff9bb76cf716c9065a.patch";
+                hash = "sha256-vqbS7rMjO2+vrBhvG+JGCHpsGZyrBoAYS+JOaXdcnMg=";
+              })
+            ];
+          }
        ]
        [ ];
  });
--- a/pkgs/development/tools/electron/binary/info.json
+++ b/pkgs/development/tools/electron/binary/info.json
@@ -21,41 +21,41 @@
    },
    "41": {
        "hashes": {
-            "aarch64-darwin": "659ba4253ca14f0bd8e74d5a2da2d6da3e73e44c0209d2c3b5e6ca65ac40558a",
-            "aarch64-linux": "9dbb040d575c33f8b2d2ab944e429979b01b5261c0240cff4749892be1bc56ea",
-            "armv7l-linux": "c96c2107073136a1fe7619e09dab07a14d7f4acde9a28d04993e67e69a156d15",
-            "headers": "1nvq3xvz38xr64r1z7xa6wdmf6zykdsbl7angmy7bvr5rw4pi897",
-            "x86_64-linux": "a27291d502b16170fe49d14beab68c4d9a1040192500e1643a9ab0b11274f075"
+            "aarch64-darwin": "7497a1f398c7bcac208fce96c73d297b1d63924624361a1a21930cd666cc4bbc",
+            "aarch64-linux": "b2b6528212e1e832889ea1493050ff5be04525cc2b8cb10161dfce83dd502c1f",
+            "armv7l-linux": "aea9f9d913f2992d711bd35e085f50381d1c049c2061920975ebe26d16e87927",
+            "headers": "0cjck5h3rdsn5s48c5gwp4mqg5xlja0hlsjz860vyym0jw8sw7hc",
+            "x86_64-linux": "21bf93906685c77f350f618d034f33202f0764aabbfc204e6b724f82196537f9"
        },
-        "version": "41.10.6"
+        "version": "41.10.7"
    },
    "42": {
        "hashes": {
-            "aarch64-darwin": "829a921e166f92c3486a56b2bc3b4b09e3fb9a28dee331f4d5766258528343ec",
-            "aarch64-linux": "b07e75414c8c24559451c1c901e16da9de8ae842d08cf472fd5f0ebc12e99344",
-            "armv7l-linux": "5923b738636711fde602ee0e5830cce9a22be9d16bc93f882720a3dedb088460",
-            "headers": "14vvshfrkfw57xh0nlw3q0m2571ckcmzvnz9k88hd881fzqhydra",
-            "x86_64-linux": "eea46e83e275fe38be7bd8068ea65750954d3c52330dd98719c09ddd4f60735f"
+            "aarch64-darwin": "ca313687fa2031ac729fa47841d73a6950763bed5bd7bc5403b561990911c0be",
+            "aarch64-linux": "74dfbe646ac85766e759c77bceda70015032a15d144b7f9418b3ca45869d339c",
+            "armv7l-linux": "756f9fc0c1446be41e869932c3aad17f974a748be1940dd309dae0bf19d82560",
+            "headers": "01yk8qsddgpx89lggmsn0735kjkci4fqkfv300p39qm7pd4lwgs5",
+            "x86_64-linux": "300afdb17fca912d050876045d66f2118acb018f7111663c628587b656839985"
        },
-        "version": "42.11.3"
+        "version": "42.11.10"
    },
    "43": {
        "hashes": {
-            "aarch64-darwin": "5183a2b15d013517386edd9f1ea8e3402755f6c3ea17893f92acb20052f3a2e7",
-            "aarch64-linux": "e8b4ef7acdfb3f254463f832dded44c17cb8c65f790d0377e8c04f91bbeeb3a4",
-            "armv7l-linux": "121f21827d46d329fd1d6c9d1c45cefc7af436bd51b97b24cc0b4253b6e02e6f",
-            "headers": "1lfm4byj4yw6va7mkj34q1qwdha8x88ns3c605jl0x4k1kfm3xpd",
-            "x86_64-linux": "3075c82d0749e136bca77563d4dd24e881714d17d98241fafd02320da5d6e237"
+            "aarch64-darwin": "9327d8ba5bc9e279d1a2f7da90235301c65a2e80eb4ad3bc5610d28d483340f9",
+            "aarch64-linux": "16071038a9677d0f00b11d3d0f0b7b4ea3250987727aa73aa563b87789f2d5ab",
+            "armv7l-linux": "088c2817c1b5928c5bea706cc60aa05ea328e6d1d8bd549fda75388a3552482a",
+            "headers": "08ar87ji8p8a97cq43bg1bv00330vd41vm23c4i4c8jkskzk3ifs",
+            "x86_64-linux": "4d0a48398c444258dbcf2f5f83b49ca5bc53583130f354e0c299dad5b22b5271"
        },
-        "version": "43.6.0"
+        "version": "43.7.7"
    },
    "44": {
        "hashes": {
-            "aarch64-darwin": "49b91ef265c603c8888500f807484b63816069c30f87ba2b403e7c87f0f45035",
-            "aarch64-linux": "c11fde221c08e9bffdb3336579f09bd934a009862f509af5033616876741be24",
-            "headers": "0pns4rylzr1a330cjmmcgyvdh19glhrgp2723gpi08xq027anrh8",
-            "x86_64-linux": "8b49b9efdd73c0f467edc3c1cd5678392c384ccf224f34ff54179f736e2f384b"
+            "aarch64-darwin": "1d75703019bb16461ae65f3081d7e6f5c0b11e901d0ccb5c343bcf7bcdd6435c",
+            "aarch64-linux": "ee1790d743af1abd6a7e3971589dcd8635b58dab51ca1359123ba5216ce3a453",
+            "headers": "07qjxn071d21rcadjsawdvq3dj8ypsbkkq0nhr8bj0k4vzxigya0",
+            "x86_64-linux": "5bcd217611d6843ececd6c9e9c1fcd1da3ab066c43d8b1a9e4b44689a1fba6f5"
        },
-        "version": "44.3.0"
+        "version": "44.5.1"
    }
 }
--- a/pkgs/development/tools/electron/chromedriver/info.json
+++ b/pkgs/development/tools/electron/chromedriver/info.json
@@ -21,41 +21,41 @@
    },
    "41": {
        "hashes": {
-            "aarch64-darwin": "1b61cc5f26ca9d329f1502697dc3e1f00fd92b593f6b1688acebd33279854d1b",
-            "aarch64-linux": "8676949b061c58d5e4454f392d5f91206f807f556d993c5ac2c58ab0dc53f372",
-            "armv7l-linux": "e7191ce892fad4cca3c302faa389e1e469402765b58ce5508969f8a5ee813b48",
-            "headers": "1nvq3xvz38xr64r1z7xa6wdmf6zykdsbl7angmy7bvr5rw4pi897",
-            "x86_64-linux": "652465ce0057fb670c5e7d4ee126fb5d6043d1c1bf9152901ac85231a5ffdbbb"
+            "aarch64-darwin": "b49ed051b571afba48e2b39815204401048f2fa4b8241f8332d4d9a41e9e39bd",
+            "aarch64-linux": "d835aae28d5c58663d8df422de7cc8cf6e6eafab14fbc441794f0ad6af791f58",
+            "armv7l-linux": "8f22126c4f5185ec4143613967dafbce8dc35f63d35332039f4f1cf0cb4de099",
+            "headers": "0cjck5h3rdsn5s48c5gwp4mqg5xlja0hlsjz860vyym0jw8sw7hc",
+            "x86_64-linux": "7929c06013b9312e660e0c39c802e1de42543e6f4b9b3a1560bb200269ca6607"
        },
-        "version": "41.10.6"
+        "version": "41.10.7"
    },
    "42": {
        "hashes": {
-            "aarch64-darwin": "ccb254d7be31327137ba0ca7550b4ab3881fc5392e91fcc70fe30887dda7dc87",
-            "aarch64-linux": "c490ddc2f45125dd610707c5cdcfec107d5da872fce72954179948e4afc74842",
-            "armv7l-linux": "634afe67b72ca4a853c9848861a07d9896bf9c6a02c354e35cbf72c6f3df07e2",
-            "headers": "14vvshfrkfw57xh0nlw3q0m2571ckcmzvnz9k88hd881fzqhydra",
-            "x86_64-linux": "655911685cdcaf74210ded16dd1dc3785555b6160a5916a929fb9a843e36ee82"
+            "aarch64-darwin": "e32137c5077c62bf42fbc846c8f534fef46766f84793cee2dcb794fc9d78147e",
+            "aarch64-linux": "edeeae0fbd1c8512c896a1fa1681d46929a63e0e03ab52bc47b56b1ff6328a45",
+            "armv7l-linux": "9b6d6cf1895c4539716d33d1e76ba894b52a132c69a3cb8959e26fb22b1d5783",
+            "headers": "01yk8qsddgpx89lggmsn0735kjkci4fqkfv300p39qm7pd4lwgs5",
+            "x86_64-linux": "ab4ee5b4a79e0162591d87ccbdc05faa91f9dc31415befdcdbb42ab7d6406973"
        },
-        "version": "42.11.3"
+        "version": "42.11.10"
    },
    "43": {
        "hashes": {
-            "aarch64-darwin": "b3117435ab234ba667ef94cf067abe9a3e0801858bf8f73e4e55e047168f9789",
-            "aarch64-linux": "1f2a73c9093a0ff2fe7fc88af940c7b93995e6f592fadbe3b2fcb524f311b081",
-            "armv7l-linux": "f930411e9c33954cc5ce299286464a145e7338099c3ee6f644bf88230d737d42",
-            "headers": "1lfm4byj4yw6va7mkj34q1qwdha8x88ns3c605jl0x4k1kfm3xpd",
-            "x86_64-linux": "2c5a54f26c6d18f9b4585a39195c5b371326094ecb0b788102b64d370ee7e342"
+            "aarch64-darwin": "b9b7d9ff132e9655a574f03edfb01add8d43a8b0d3a79320c226f6aa99c922ea",
+            "aarch64-linux": "091707f83e4191f36848152d664c80c255572dfe36a042250ca94037c06959d2",
+            "armv7l-linux": "9c3dc509c12709522a22e3c4eb3270907050391fe05d89f68ab5ea689f9aa5b2",
+            "headers": "08ar87ji8p8a97cq43bg1bv00330vd41vm23c4i4c8jkskzk3ifs",
+            "x86_64-linux": "7ea6157ec70b065ef6a7f77fc1822dc6441f5702b0f99660e26cfca1897ecfa4"
        },
-        "version": "43.6.0"
+        "version": "43.7.7"
    },
    "44": {
        "hashes": {
-            "aarch64-darwin": "4ddb6a5f9c5f5c2bd3897aa36a63a161ef350e4f38bd118acfa924ad6e98f75f",
-            "aarch64-linux": "cecf416116f2273461e10b0f14eaa2318e6b66e44b6bbe7439866ce1bf6bc4e7",
-            "headers": "0pns4rylzr1a330cjmmcgyvdh19glhrgp2723gpi08xq027anrh8",
-            "x86_64-linux": "53167b1bdf4c7887b29b228c0b5f3f43704d9c8917859c42fe98da97cf03e444"
+            "aarch64-darwin": "04f78defe5e9000b20d0c35e27f2fc7af37cb2b752c181f2b970883a49f66132",
+            "aarch64-linux": "42d7c9c5b338a07240c92b73afcc69ab8c241bab7bc77327415eacbfd45bdf18",
+            "headers": "07qjxn071d21rcadjsawdvq3dj8ypsbkkq0nhr8bj0k4vzxigya0",
+            "x86_64-linux": "12025ef54128a3b517a3657e63543b700df319d559f5fce0a7d5226d1fa3a166"
        },
-        "version": "44.3.0"
+        "version": "44.5.1"
    }
 }
--- a/pkgs/development/tools/electron/common.nix
+++ b/pkgs/development/tools/electron/common.nix
@@ -26,17 +26,6 @@
 let
  gclientDeps = gclient2nix.importGclientDeps info.deps;
  yarn-berry = yarn-berry_4;
-
-  # Only apply to old versions after upstream updates to Yarn 4.15
-  # https://github.com/electron/electron/blob/main/package.json#L152
-  yarnPatch = substitute {
-    src = ./yarn-fix.patch;
-    substitutions = [
-      "--replace-fail"
-      "YARN_LOCKFILE_VERSION_PLACEHOLDER"
-      yarn-berry_4.lockfileVersion
-    ];
-  };
 in

 ((chromium.override { upstream-info = info.chromium; }).mkDerivation (base: {
@@ -84,7 +73,6 @@ in
      null;
  yarnOfflineCache = yarn-berry.fetchYarnBerryDeps {
    src = gclientDeps."src/electron".path;
-    patches = [ yarnPatch ];
    hash = info.electron_yarn_data.hash;
    missingHashes =
      if (info.electron_yarn_data ? "missing_hashes") then
@@ -167,16 +155,7 @@ in
    #endif  // GPU_WEBGPU_DAWN_COMMIT_HASH_H_
    EOF
    (
-      PATH=$PATH:${
-        lib.makeBinPath (
-          with pkgsBuildHost;
-          [
-            git
-          ]
-        )
-      }
      cd electron
-      git apply ${yarnPatch}
      YARN_ENABLE_SCRIPTS=0 yarnBerryConfigHook
    )
    (
--- a/pkgs/development/tools/electron/info.json
+++ b/pkgs/development/tools/electron/info.json
@@ -56,10 +56,10 @@
            },
            "src/electron": {
                "args": {
-                    "hash": "sha256-bnjzowPqh0+lbuAxxm3nFCzQ6gQtG7Qzuq03u58hs90=",
+                    "hash": "sha256-QhabuiCpDFMfcAiZN9c5MSwdGfc7/3orLVW9O7bwJ1A=",
                    "owner": "electron",
                    "repo": "electron",
-                    "tag": "v42.11.3"
+                    "tag": "v42.11.10"
                },
                "fetcher": "fetchFromGitHub"
            },
@@ -1367,7 +1367,7 @@
            }
        },
        "electron_yarn_data": {
-            "hash": "sha256-3djOSYb8lSTWbtclB23O1I/Aw3n6auInUAtzOYrMth4=",
+            "hash": "sha256-EIdGb0MAZeYelJujwLvjFIRjvuayq5qBu8eAfCQSG0Q=",
            "missing_hashes": {
                "@oxfmt/binding-android-arm-eabi@npm:0.42.0": "42c08d87ce491086843070241f8777fa2cb968f4a08f67b3f6c33a8f67e0b3eac50eae146daede743e90e3bc32326951c5188814eea02e9c3e4a9764a4b492ba",
                "@oxfmt/binding-android-arm64@npm:0.42.0": "73e6609498d05c655c6a435af9f3e4f341137c260c7ae27fbb0377573574ca5200bd9f187aa90d442879733bbd0c4e91ae023c3b4579c9a57413a0b2922c023a",
@@ -1388,30 +1388,56 @@
                "@oxfmt/binding-win32-arm64-msvc@npm:0.42.0": "04bd529ea236c23d8dc73d95acd365612ab489b0e6a4bdd976302b933b92dcc11d4d1629e2294036f16c1e1f5120140547f65060a9e2dc8adbb21f790e2eca39",
                "@oxfmt/binding-win32-ia32-msvc@npm:0.42.0": "9775afa164de049416abf481f062b8c670cd27a70d82a0868fa61749f741e777a76eb0a57a9ef276f158a35741d90a856a492777a0a9f17c9ac01ead32935fe3",
                "@oxfmt/binding-win32-x64-msvc@npm:0.42.0": "5c38197ac6f874c2622b68a531b9fc9a221de05aa09c40717bba775f658680ebf964db7aa41c12271f90261bf50713cd4ebb2c10f12bf33cf2103fb9d67a88bb",
-                "@oxlint/binding-android-arm-eabi@npm:1.61.0": "64a0e4e724ec776f7bf88926b9544484ac4b8b7c906539073683281d0de4d887494aabad654807336f8c306cbc2bbd2cbf218c780fa02ce7b8cd2c9c280a886c",
-                "@oxlint/binding-android-arm64@npm:1.61.0": "fcbef757ed0eecbddb90e3818315614dbd4bdba7f9e8aa23255d39d12dd2ee5cd1bc5608f2d236b3028330bad7ba741e7dc3569d06373dabade10bcafb056de7",
-                "@oxlint/binding-darwin-arm64@npm:1.61.0": "1ff458a5cde78b3b3f7852dad86ef6e430732361b81e5ac5712f83a237725bde05d67980beced4361416abb376dc6a6384435f2a4932a62c5794a58ca01b9d73",
-                "@oxlint/binding-darwin-x64@npm:1.61.0": "3e09d59d46985c2652ee3fa3560215df05eebf470f2acd3fb502d303f661e3d75861a8908a1b215e3912e5da23673cc517862e06be21be6c95770fc5848778ef",
-                "@oxlint/binding-freebsd-x64@npm:1.61.0": "8f7141e3a7a0334836ea9f333d76fb6a12e145533cda2f485fff536b725193595a172c154b402d0eff3b14e13a36b3a0a14629987bcbf8faa444d9213c5e78d8",
-                "@oxlint/binding-linux-arm-gnueabihf@npm:1.61.0": "2bf2eb6e1e6a3339822464e7f66f52824348ea5b4b0a2f87ed5fdfe6b7b993bb2ea0346e59dc68ec78030a3c4b8784810a2bb88edb69de99aacdda03606a35cf",
-                "@oxlint/binding-linux-arm-musleabihf@npm:1.61.0": "53d57e4693087ddd6e9104651f3200d11276aa8bf261ffe07c91908b7ba6dee0aaa58d74f3b58ad256b8dfb4689fee0e205d9479550b87a898644396afb1de55",
-                "@oxlint/binding-linux-arm64-gnu@npm:1.61.0": "b19d95033889b7a22e29b6b38a84c913f5e087015354de8ea52e60e8d067ecdbcedcecd49df2d3338e1ce5d579e079efaa43ee67ca626e92b619d41aa18277ae",
-                "@oxlint/binding-linux-arm64-musl@npm:1.61.0": "b61ede290d57073065e20161ae54d36d4700a814e6e62abc63e8e4f18558598e22695fcb9b14c67ce8aec50de2b733d6183f873d65de491936fbf7e1b9fbb59e",
-                "@oxlint/binding-linux-ppc64-gnu@npm:1.61.0": "7d0cb33713ce1716a0ddbc100b79eb888ad20af74c0c924db01b0b27c33677717f3f7a0f6d341ec0637ab0ec2dbc5033fea4154cf88b6c9513b1796b6a53ddf3",
-                "@oxlint/binding-linux-riscv64-gnu@npm:1.61.0": "a6c8ad8419110bbfc35f12256058fb0c31816f328a089bd6424ba03d582ebaed71f39ce673f77767dd17e2a4ed021789106a580d99e5f0a1f097ab3cf916f7a8",
-                "@oxlint/binding-linux-riscv64-musl@npm:1.61.0": "64e6073f588b995f509dccb6b66060a1cfeb5cea08613edf1a3f7819992ccce3a3f9539cd2b1962231a472f12c4ffa325600bbcc9279ada400b993488989470e",
-                "@oxlint/binding-linux-s390x-gnu@npm:1.61.0": "93b84e9694a451b023a2fbf2ca3cad533b5ea947bd89f6a8b95433cf12b6bb86bdbceb51188a5a5914a51a9e0ecca02abc6b0d656ce9616d8904eb8ebbaf84a8",
-                "@oxlint/binding-linux-x64-gnu@npm:1.61.0": "49d0ba0286946d633d933e2ae575a38dfef9f6570380d141f2bcdf10b09cba192a87767e5fd6cbeb115c23eae9c7241830c022180ada5bc96131badcc65c3d31",
-                "@oxlint/binding-linux-x64-musl@npm:1.61.0": "54567fcd74360d287a85ff18ce82c2691c0fea7f87e720f0390a621acf2422f64cafd135deebf329831fcac7cfe66389c8e6a5dcb8f8427ea6d4b3446ddeeab0",
-                "@oxlint/binding-openharmony-arm64@npm:1.61.0": "011ffbfde581da50b130705d59e0a043b4e6858dea1fc6fd100c7a2aa511179726769197a6868809a7040a28f454c0481a832c667b44b10820c0300b74a0b6f7",
-                "@oxlint/binding-win32-arm64-msvc@npm:1.61.0": "d5f962f94acfb6a882b04eb9ba33e05e2896b96cb6ab7b44c70aff55be93c633c6c88884d4f3f65f82ab88b6535c6034f4e9a7141bcfff23ad24efd0cb7bab78",
-                "@oxlint/binding-win32-ia32-msvc@npm:1.61.0": "f2902478c85eb95665cf3c4021cc4cdd3ea98f8863d9a311a6f2532059d1c8cc3c36c9e0eac7b459827cd03c4c7e6803bb96939d7476f3289df9362aaadd4710",
-                "@oxlint/binding-win32-x64-msvc@npm:1.61.0": "e4a5cf6c8db10fdf1cda748ab368357260e1fcab8df5819587b940613f55e57a729e99641119ff074d5aea59de16f4563322e01be5ac27d1349c9ca14d60302d"
+                "@oxlint/binding-android-arm-eabi@npm:1.80.0": "6690105857699fc8033aea03e715367cbe9a09bf5b0a32d5d5861f4ba464b0e6c1d3ef6aa773536b55b4076330eca29ce84585647c0986ac6721004ca1b3e14a",
+                "@oxlint/binding-android-arm64@npm:1.80.0": "27dde08264c5009c0d18cb796a81b9e9799f5d6419431d886775afb542dfe2e713f1640d6480d87e15835c0a4e93596cc799d1e57dd751c5dffdba4f546ea6a9",
+                "@oxlint/binding-darwin-arm64@npm:1.80.0": "343de7feb3a6fd0075c2d5c42b45657f5f303050028256aa1844069e746d0e10153e8b400e5c4f5198efd50cd4d9fa061239e05a75ca2c7906d213e418b3f2ce",
+                "@oxlint/binding-darwin-x64@npm:1.80.0": "f0cc2dd50265e6fd72fa56cc1df681c059db86945b372583667228eaa4edafb253e7c5b1f2357068f8b4587821120ee455fa9b05110fe2b1316468d226be5d94",
+                "@oxlint/binding-freebsd-x64@npm:1.80.0": "e7760e89718a9ab68329197b1f069aef1777a519c29a34ebbe9cb18bf53b87298ccbd7862952044bf1a4f208831b20286b3155fdf832adbb96394a91eec52f72",
+                "@oxlint/binding-linux-arm-gnueabihf@npm:1.80.0": "841422193752bd08fa1fde471737d47c6fcbfd8a1156df250df11e6f2305a08f932bc3760b556588bf62dfe96f536e254c336c095fd6a9693b24e8bc2510d855",
+                "@oxlint/binding-linux-arm-musleabihf@npm:1.80.0": "d39330ec7a16425f91e45fc5cbf1a9d700bb49fe2357d55f62e6beb268dc083f6ec10a19b51f2b00f0c91ad7a8a208a08080f419c00ab08086b051a0fa89d222",
+                "@oxlint/binding-linux-arm64-gnu@npm:1.80.0": "f5a741fd67343395b708d356f13c2465c7a23aeb68560e464059c0042c6dc44e35d760917991dc6ad20388ea2a8acb27b841dd76a1597cdfb9c5fa6e412120d8",
+                "@oxlint/binding-linux-arm64-musl@npm:1.80.0": "d389e4b7941dda900740bacb5801b45396ccaef3c6663b771510ab34fbb25257c792cbddcbeedb6b448e282b850154d61d5d461e4e5aebc80441225de249da8b",
+                "@oxlint/binding-linux-ppc64-gnu@npm:1.80.0": "0d977dd5ab49dd6f0c16e97a03fad5a0e8cdd71958d9002a048af865be889164f210c17f5eaa027e2ee37fa88c2813024d321fe1813d3da030067ac9e399a0b9",
+                "@oxlint/binding-linux-riscv64-gnu@npm:1.80.0": "32b244b36684228bcd05ce2bba13f9aa664737d3cbded21c730cbf96ef009f671b5a4bb2e094602dee132817645e2bda707b360ce860a70f86091cade07a7000",
+                "@oxlint/binding-linux-riscv64-musl@npm:1.80.0": "ef69cb63cba96eb8e8e8b5e3d69b40b7844d8aa02da1ade86d0e8539ba97674bf06f823407cdfa374d080a7e203f7241335de6b8f7b71da8e2665beb00f55d70",
+                "@oxlint/binding-linux-s390x-gnu@npm:1.80.0": "48f534815cc223bcd05f3137e03e7c468a630d3e97e5117de49f6a076933cac1cf4c7257651bddd9d51a1b4e6c561ed9e7e2e83f1f2616729fe8af7d15f0561b",
+                "@oxlint/binding-linux-x64-gnu@npm:1.80.0": "a447c6bdd20455f32d523a3ae65056b2e12bbee00513e24c271848b424c7d6674e02308a3693f9eb2ad908d2488e4e7204526316d268b6b3596169ab7a66ed74",
+                "@oxlint/binding-linux-x64-musl@npm:1.80.0": "91be32c8805673effe38c10a01d2b9ba47d60829518e36e52598b9844d3fc7a113aefc693c89b14b3677f3b6362ec0972432bc3ca6d76f2eb41e2b1ffdf2af03",
+                "@oxlint/binding-openharmony-arm64@npm:1.80.0": "bb0ff9049618975e88527e5555c6280a4a8019f1ee55e3612f78abcd8ab4129387bd0418c31cfa23885ed2c2338338eb0ef20b3957784340f6d0da73abda2be3",
+                "@oxlint/binding-win32-arm64-msvc@npm:1.80.0": "2a6b5c45c3acd571fff66ae27f445acef72f0c7c6227fe73f85977822403cd02b068ccc53e66b5c5723e4be523ec7ebcfcaee02a83aef514eb9a8d61ea9d4053",
+                "@oxlint/binding-win32-ia32-msvc@npm:1.80.0": "1c68fbcb8f1d34c51458c84b03266b8f1f54fc923a805442657b433a10828625bdd0e04678aafec985396bc1431ce02fb607a1f502831aa184a16d714a75443b",
+                "@oxlint/binding-win32-x64-msvc@npm:1.80.0": "d5ffb6399f5b654105b74a1adbc13d820cba5a631813cba85f2c14e8da4b72b13d518aef261a6a81b99fc4430520d3ad1b48e5ebcdb7d0eb652cc94f5a5b8da4",
+                "@rolldown/binding-android-arm-eabi@npm:1.2.9": "1ce723761c6f6909e9f7657f3d0c157d11ab0397662679cecc46f87a5493754b05a5eacbbff8c0f21ca9f6bf6f18afb7914999e85dad926852ff6e63f98985ba",
+                "@rolldown/binding-android-arm64@npm:1.2.9": "1d597c83de815f2cb2375b8c6bb291ba34fdb6cc4fbbe7ad109f0b6a41d7434f5072655b143349ec81c9bd765f130475b0895d6d0fbf5addb51a0016aa8de015",
+                "@rolldown/binding-darwin-arm64@npm:1.2.9": "9be017bac93b93c0d4211cc87180a6cc00cca2e68b3857677f030fb37ba3cd9530b33f706a523c85625cfcf1121613353d392bb11ca5e841c72f7baec04ab1b7",
+                "@rolldown/binding-darwin-x64@npm:1.2.9": "2c6af58173c4177145db94fc210e56c32f20255ebe6df782647e39fc4811071d03e7a25b52412ffa24bc67178c800af53fbadce92f3dfd62da901672e46c9c19",
+                "@rolldown/binding-freebsd-x64@npm:1.2.9": "d6c2a208797defebe61e56b1a462a6bef90200253950f9b24f970b93cf91f7b3b0d591f5cf5f4426079cf5c9a6e5051a20d789ae2b837b1c680c2c47260aec4a",
+                "@rolldown/binding-linux-arm-gnueabihf@npm:1.2.9": "99a39c7958ef1a7ba6764b288f2d9295a682d38d280ceb401165643c83c659db766ce1185d86646c84396a9acfad25b48c7e11302adc8cd53bf629c106b45a26",
+                "@rolldown/binding-linux-arm64-gnu@npm:1.2.9": "9e84c6c18dde65e53fa4e8aba5d4855806b423df2453b28bc8dd15f0e48c46b7b1cd3c9992a9b88e173efca5f12283f1650468a327fe5dee968d2b1187ea66aa",
+                "@rolldown/binding-linux-arm64-musl@npm:1.2.9": "7fedfcaaac962bec943e7b4da51b176aadd02631d1fcaf4880ae72365d4d868f409799cbe3f7025672bb2007a0004dd33729d986404ac1c7cc8b88215716adc2",
+                "@rolldown/binding-linux-ppc64-gnu@npm:1.2.9": "dcd54975afc4f736e2b736a37158bb8eeadc58801fb40c0f3bf177d504fcea455209dd527151da7ffc818ae83327017cbd8549aee5d1eb07286049a652d79503",
+                "@rolldown/binding-linux-s390x-gnu@npm:1.2.9": "a3187e4309c9a3765f83e92e099baaf978581351d9e14f9ba6cd087ceb71010c9d807c08649ddfdffc0d93ac4530abdcbfa2611cb00198fa49a1fe16ba706d7e",
+                "@rolldown/binding-linux-x64-gnu@npm:1.2.9": "9fed0b83539a4e7d9ddc84d2a43194f4d3f697649a0856f342f947291ba21e7730f89f333960f0229e559f75cf752a4ea4632060b448f7a405602dd216d5035d",
+                "@rolldown/binding-linux-x64-musl@npm:1.2.9": "f8fa1d238157f5c397a8426696d2907f846e3c38e9dc4eadd2d841f84cda5966c3975864cd460c3ce3a0564ab212e329cfe923d911177efe14aef612a8174c26",
+                "@rolldown/binding-openharmony-arm64@npm:1.2.9": "13ac71327a28246eb9c38b458617d01ed93835ff8e17122606e718fc06e99fba4805e051b8d3786f0674ed95c0a98ec79431144e72d7452942dc17d8af4a14fc",
+                "@rolldown/binding-win32-arm64-msvc@npm:1.2.9": "a2f65e085ab4c6859361b97120a8298d2edeed0650ea6f3f70cb2a1e81f0b7f4ae7a0cb002af68d68c24f0706a9a3d55fdd8d4d96d4e8f7d5b73711abdf6e5d9",
+                "@rolldown/binding-win32-x64-msvc@npm:1.2.9": "6a8c186b5b9b9031bb870470f5da7fd4c9272c0e8602ceb77b6a0da78c46f82b4be6e9c34fc3723211d229e13f92d7bb30523f8195715299cee23fcf5dbd18e2",
+                "lightningcss-android-arm64@npm:1.33.0": "46c40a0474a7a9ddcdc33e0ea634912894a9360b6ba6f2bc42f1a817d16992784d2fe6f421d293a90ea94fb481503e27fdc54f0540de0b41d7028fe9e9c9e56a",
+                "lightningcss-darwin-arm64@npm:1.33.0": "398b770e33f66db9e4c14e4a45d0e93fa59644bd29ce5082de79ee9560a5946321ac55e896aa7fb3f177d218bef3f2dca530e209a857f0f066bf3296f5dc0742",
+                "lightningcss-darwin-x64@npm:1.33.0": "132bdab8f7b66dc99730f1ccfcb882880e411420e3f9ca764c348c686112d75962d5d7e928f3bbce7088c1be168d00ea8d722fd909033b807eef191b5a2832c0",
+                "lightningcss-freebsd-x64@npm:1.33.0": "05001395776e994ea1254dcc2613f06b44458ba33769e3a1679a0f577e43632af378cc1582f3bd1cb36e480d237066a371bc04233d6c84f8e2fe9979ab4a4032",
+                "lightningcss-linux-arm-gnueabihf@npm:1.33.0": "d0f6d993846992cf6db80f2992d0b89ffddd65a8260bbe6a1534bde28510bcfa214e8831df9ccfef5ede006a6368de1649e1d96a3e122169286647b704e08f5f",
+                "lightningcss-linux-arm64-gnu@npm:1.33.0": "278a5c553e15ed7645d3e83a3b1515060e98a8742b7008af28d610d6495a09368e73ed8b90bcb537b37249bfc2446ef5b9614b3626222f25153c538909488548",
+                "lightningcss-linux-arm64-musl@npm:1.33.0": "7aa2a2ef42e8c713e6e8eb947bf64d5272c6fdbfca7b4eb3adde555357652be27cc0d84d6fef6266543c2d303943a4c4472679d1e258458119b159f0ca868ffe",
+                "lightningcss-linux-x64-gnu@npm:1.33.0": "fa57a09af3340dc5f11fdbff820fbb7b08e306e69350a500b523c88f54c1e3a40b3785fed6043d69e2e18bacd4b72410518c9b817ee987c704a80851d9201e45",
+                "lightningcss-linux-x64-musl@npm:1.33.0": "4b0cad846f8fbe4ec321a45ef9c0d02cf4277980ac34dcfc7b422b34381e7cb11512819401b01bf029d10aa0fb8a35906ce850ba38d9f43605917ccc9b0b5d4a",
+                "lightningcss-win32-arm64-msvc@npm:1.33.0": "5e4b58d7a41fe3c37ce2af7b1a95c3722a6064a84fb6286ba2cf1106651223403b5a5863ecd3eb8fb9732480e612e30d786b859329391b0197dffc88ca18c953",
+                "lightningcss-win32-x64-msvc@npm:1.33.0": "7beb4c8580f9ea45fea6d92a8de42f706c4935b2ca68f4f5163a2bd9f6ed1574f7e53686e4927883078b07a4063a9fffdc4b41968568354259066c7a70c156a4"
            }
        },
        "modules": "146",
        "node": "24.19.0",
-        "version": "42.11.3"
+        "version": "42.11.10"
    },
    "43": {
        "chrome": "150.0.7871.250",
@@ -1478,10 +1504,10 @@
            },
            "src/electron": {
                "args": {
-                    "hash": "sha256-SLK6HCWzRGZRSkENI2lacq04E1yBxtthChsDAmAOgXg=",
+                    "hash": "sha256-miOYOZYPTE1iB7aPPBiE3TvvhDBCPAp8wteSVS+EuF4=",
                    "owner": "electron",
                    "repo": "electron",
-                    "tag": "v43.6.0"
+                    "tag": "v43.7.7"
                },
                "fetcher": "fetchFromGitHub"
            },
@@ -1823,10 +1849,10 @@
            },
            "src/third_party/electron_node": {
                "args": {
-                    "hash": "sha256-X7aZh0QOm79anmh77QRiHGRSi8TERuWnWXrcPqDYPjY=",
+                    "hash": "sha256-D0Emw+F+8fz41onhxfiCQuxEQx+4jjsT7Ym2mqrKkRI=",
                    "owner": "nodejs",
                    "repo": "node",
-                    "tag": "v24.20.0"
+                    "tag": "v24.21.0"
                },
                "fetcher": "fetchFromGitHub"
            },
@@ -2797,7 +2823,7 @@
            }
        },
        "electron_yarn_data": {
-            "hash": "sha256-D3Tmxc2tzpUfKlWq4RXy6hYpqJ0Dsw7J4aQPp1rSZVs=",
+            "hash": "sha256-HiwgiBW34bvgpajmz1qCrPQVd1mO5vkNVzaimloWe5Q=",
            "missing_hashes": {
                "@oxfmt/binding-android-arm-eabi@npm:0.42.0": "42c08d87ce491086843070241f8777fa2cb968f4a08f67b3f6c33a8f67e0b3eac50eae146daede743e90e3bc32326951c5188814eea02e9c3e4a9764a4b492ba",
                "@oxfmt/binding-android-arm64@npm:0.42.0": "73e6609498d05c655c6a435af9f3e4f341137c260c7ae27fbb0377573574ca5200bd9f187aa90d442879733bbd0c4e91ae023c3b4579c9a57413a0b2922c023a",
@@ -2818,33 +2844,59 @@
                "@oxfmt/binding-win32-arm64-msvc@npm:0.42.0": "04bd529ea236c23d8dc73d95acd365612ab489b0e6a4bdd976302b933b92dcc11d4d1629e2294036f16c1e1f5120140547f65060a9e2dc8adbb21f790e2eca39",
                "@oxfmt/binding-win32-ia32-msvc@npm:0.42.0": "9775afa164de049416abf481f062b8c670cd27a70d82a0868fa61749f741e777a76eb0a57a9ef276f158a35741d90a856a492777a0a9f17c9ac01ead32935fe3",
                "@oxfmt/binding-win32-x64-msvc@npm:0.42.0": "5c38197ac6f874c2622b68a531b9fc9a221de05aa09c40717bba775f658680ebf964db7aa41c12271f90261bf50713cd4ebb2c10f12bf33cf2103fb9d67a88bb",
-                "@oxlint/binding-android-arm-eabi@npm:1.57.0": "3860b1c5a2096817da9c18cbbc24f8b56f4b6b0cefdea19e0cc0f278055aac85d891fa9d70e02f551532bf45f6a79bb3ebc63d1c2e1dff724134a9bc398f8060",
-                "@oxlint/binding-android-arm64@npm:1.57.0": "fb40a768d5608e9b41c35f16cac2e57571cbcbf1b872bc145f60a7e1fd7a478c3806e3a330579e167f8877411fe362561a103976e41cbd1e46fb02d7d0d97611",
-                "@oxlint/binding-darwin-arm64@npm:1.57.0": "fd75b91d3db274782afec0b1dee319a01b864f11e0a4af1808de23762403000d13f7921c7889302c75d945b09005a44cdf17e3ad345c1ef2842403ac28f0dfb0",
-                "@oxlint/binding-darwin-x64@npm:1.57.0": "75e2e5423ccc82f61def946317c774f951e0a1443cd9c4c1550e0941da9a645a7acd3ed344c65b50288d4842a3a523a6cd9838a28d452d20c7a041fd1b15fe3a",
-                "@oxlint/binding-freebsd-x64@npm:1.57.0": "ad0f737171b8d60a1bcfeeb1736f0ecb751ebbfd915ad7e27d5ad25a858419be541a0854fc573be01752def42b9a3864d0aa11176b574571bb44350307ad2f59",
-                "@oxlint/binding-linux-arm-gnueabihf@npm:1.57.0": "a912a546bab5831bb5ae6e697e67b33f86fc48caaf1615df9ff3234818299845cf27dacecbe17ec679a757eb6354e5e15002c632ba43f76fc890060bebd45d1b",
-                "@oxlint/binding-linux-arm-musleabihf@npm:1.57.0": "e15e5c951193afd936f155db38b9dd48f9cf0e7de8eaf07acf957c4b5b47e79c2f668d4c47310bf28efb2af5640a5a7d3d6700c723c748efefa7e72c8660b1a3",
-                "@oxlint/binding-linux-arm64-gnu@npm:1.57.0": "c167c4bcfe4067703c626264b973dd2195192615aa4bb1ef07d918c8cd128cb1d3504ba991dbd78daee29e6bf5997704c87004e93a379231377c7f7b5c505e55",
-                "@oxlint/binding-linux-arm64-musl@npm:1.57.0": "d0a60e2aa7d491baf85450fb9c0053598da5cc884b9b4e0ed557baa813bcead8e9470259c5f390e412ba173932a0b2703f0b17b06b494ce480fc25ded8074461",
-                "@oxlint/binding-linux-ppc64-gnu@npm:1.57.0": "7798e0a7e8c71f6f3e2f495fdf1109f08d4c2a7357fa19c7f9111b9510f1417175afb00845e39692e5fa4b510cc56d3e8f76bf3f0372f651d19d587b623cdab8",
-                "@oxlint/binding-linux-riscv64-gnu@npm:1.57.0": "8cc0cb3eaf2ff0716e52ce8743e5cc7e952b25150a5e75fcb9b5d7a4f82a99295ce7a3ca9a0bf6694e917c629621e01e465d816379acb264c5f2f4e860d44e24",
-                "@oxlint/binding-linux-riscv64-musl@npm:1.57.0": "1de23e270049060ef5cc1824de2aafbd7129d07c13052c109bd7de62f8bf29ab91bbcf8c15cbbc6ba6aa382b90e1bae456d5160bc8518adb7973cdcd99625127",
-                "@oxlint/binding-linux-s390x-gnu@npm:1.57.0": "35791cd14a661de5605587c81b5f4d9715de92a2f888b4e5fb1ea85626b59c1b53306feadd9020652598e0ff7db8ec31d0d43f8e647a8e1c38361d1bfdc5f288",
-                "@oxlint/binding-linux-x64-gnu@npm:1.57.0": "a55364f9d86efa12f38c54f01b02d1310600245a10cdd27a1ec9b0bfc98522a686feb6b15b1a2ef70c7676eb7b3dc7efa5e2e252313496fc910be368d4c05ee3",
-                "@oxlint/binding-linux-x64-musl@npm:1.57.0": "f6862ffcbd14261528f9a3237d8f52752b745822b54d1c4c6c937830e3712e7b2b8d00aa07838bfc7024f2648d9f3b85c3fa05f6a78c40b5f259e618dbfbeb68",
-                "@oxlint/binding-openharmony-arm64@npm:1.57.0": "1420c753028b583ce4ea00edb14f47def68d675492ef8611e98ffe0cf0a0749cc368b8619d4760d38e02c15b06bda32eafce907f6bcefa997db4fbff3a900be7",
-                "@oxlint/binding-win32-arm64-msvc@npm:1.57.0": "2bb5a9f09e1f95e7bf4a9f76af29ba7623d3a83f35e9201cd2f45375ae891c77ddb87a09dcbf2f2416fd3d6e24f34582618da307ed65f8435b943672cb8be5aa",
-                "@oxlint/binding-win32-ia32-msvc@npm:1.57.0": "a2f8f3387866a6d371c50ec4d3aa2043e420bfe1cd523053083f68a33ee651fc9948485060b4e8827d603695b04d492cfa5ef8cdd1fb760cc34dd7674fe13a0b",
-                "@oxlint/binding-win32-x64-msvc@npm:1.57.0": "380591b6937dc483e2db3edf5ace4aa48a06d1d17d419ded224df8465b20840fea8f9d1b1aef38dfa89622eb9d7991592d80b15ceb871b5c09ef9b85197c0de4"
+                "@oxlint/binding-android-arm-eabi@npm:1.80.0": "6690105857699fc8033aea03e715367cbe9a09bf5b0a32d5d5861f4ba464b0e6c1d3ef6aa773536b55b4076330eca29ce84585647c0986ac6721004ca1b3e14a",
+                "@oxlint/binding-android-arm64@npm:1.80.0": "27dde08264c5009c0d18cb796a81b9e9799f5d6419431d886775afb542dfe2e713f1640d6480d87e15835c0a4e93596cc799d1e57dd751c5dffdba4f546ea6a9",
+                "@oxlint/binding-darwin-arm64@npm:1.80.0": "343de7feb3a6fd0075c2d5c42b45657f5f303050028256aa1844069e746d0e10153e8b400e5c4f5198efd50cd4d9fa061239e05a75ca2c7906d213e418b3f2ce",
+                "@oxlint/binding-darwin-x64@npm:1.80.0": "f0cc2dd50265e6fd72fa56cc1df681c059db86945b372583667228eaa4edafb253e7c5b1f2357068f8b4587821120ee455fa9b05110fe2b1316468d226be5d94",
+                "@oxlint/binding-freebsd-x64@npm:1.80.0": "e7760e89718a9ab68329197b1f069aef1777a519c29a34ebbe9cb18bf53b87298ccbd7862952044bf1a4f208831b20286b3155fdf832adbb96394a91eec52f72",
+                "@oxlint/binding-linux-arm-gnueabihf@npm:1.80.0": "841422193752bd08fa1fde471737d47c6fcbfd8a1156df250df11e6f2305a08f932bc3760b556588bf62dfe96f536e254c336c095fd6a9693b24e8bc2510d855",
+                "@oxlint/binding-linux-arm-musleabihf@npm:1.80.0": "d39330ec7a16425f91e45fc5cbf1a9d700bb49fe2357d55f62e6beb268dc083f6ec10a19b51f2b00f0c91ad7a8a208a08080f419c00ab08086b051a0fa89d222",
+                "@oxlint/binding-linux-arm64-gnu@npm:1.80.0": "f5a741fd67343395b708d356f13c2465c7a23aeb68560e464059c0042c6dc44e35d760917991dc6ad20388ea2a8acb27b841dd76a1597cdfb9c5fa6e412120d8",
+                "@oxlint/binding-linux-arm64-musl@npm:1.80.0": "d389e4b7941dda900740bacb5801b45396ccaef3c6663b771510ab34fbb25257c792cbddcbeedb6b448e282b850154d61d5d461e4e5aebc80441225de249da8b",
+                "@oxlint/binding-linux-ppc64-gnu@npm:1.80.0": "0d977dd5ab49dd6f0c16e97a03fad5a0e8cdd71958d9002a048af865be889164f210c17f5eaa027e2ee37fa88c2813024d321fe1813d3da030067ac9e399a0b9",
+                "@oxlint/binding-linux-riscv64-gnu@npm:1.80.0": "32b244b36684228bcd05ce2bba13f9aa664737d3cbded21c730cbf96ef009f671b5a4bb2e094602dee132817645e2bda707b360ce860a70f86091cade07a7000",
+                "@oxlint/binding-linux-riscv64-musl@npm:1.80.0": "ef69cb63cba96eb8e8e8b5e3d69b40b7844d8aa02da1ade86d0e8539ba97674bf06f823407cdfa374d080a7e203f7241335de6b8f7b71da8e2665beb00f55d70",
+                "@oxlint/binding-linux-s390x-gnu@npm:1.80.0": "48f534815cc223bcd05f3137e03e7c468a630d3e97e5117de49f6a076933cac1cf4c7257651bddd9d51a1b4e6c561ed9e7e2e83f1f2616729fe8af7d15f0561b",
+                "@oxlint/binding-linux-x64-gnu@npm:1.80.0": "a447c6bdd20455f32d523a3ae65056b2e12bbee00513e24c271848b424c7d6674e02308a3693f9eb2ad908d2488e4e7204526316d268b6b3596169ab7a66ed74",
+                "@oxlint/binding-linux-x64-musl@npm:1.80.0": "91be32c8805673effe38c10a01d2b9ba47d60829518e36e52598b9844d3fc7a113aefc693c89b14b3677f3b6362ec0972432bc3ca6d76f2eb41e2b1ffdf2af03",
+                "@oxlint/binding-openharmony-arm64@npm:1.80.0": "bb0ff9049618975e88527e5555c6280a4a8019f1ee55e3612f78abcd8ab4129387bd0418c31cfa23885ed2c2338338eb0ef20b3957784340f6d0da73abda2be3",
+                "@oxlint/binding-win32-arm64-msvc@npm:1.80.0": "2a6b5c45c3acd571fff66ae27f445acef72f0c7c6227fe73f85977822403cd02b068ccc53e66b5c5723e4be523ec7ebcfcaee02a83aef514eb9a8d61ea9d4053",
+                "@oxlint/binding-win32-ia32-msvc@npm:1.80.0": "1c68fbcb8f1d34c51458c84b03266b8f1f54fc923a805442657b433a10828625bdd0e04678aafec985396bc1431ce02fb607a1f502831aa184a16d714a75443b",
+                "@oxlint/binding-win32-x64-msvc@npm:1.80.0": "d5ffb6399f5b654105b74a1adbc13d820cba5a631813cba85f2c14e8da4b72b13d518aef261a6a81b99fc4430520d3ad1b48e5ebcdb7d0eb652cc94f5a5b8da4",
+                "@rolldown/binding-android-arm-eabi@npm:1.2.9": "1ce723761c6f6909e9f7657f3d0c157d11ab0397662679cecc46f87a5493754b05a5eacbbff8c0f21ca9f6bf6f18afb7914999e85dad926852ff6e63f98985ba",
+                "@rolldown/binding-android-arm64@npm:1.2.9": "1d597c83de815f2cb2375b8c6bb291ba34fdb6cc4fbbe7ad109f0b6a41d7434f5072655b143349ec81c9bd765f130475b0895d6d0fbf5addb51a0016aa8de015",
+                "@rolldown/binding-darwin-arm64@npm:1.2.9": "9be017bac93b93c0d4211cc87180a6cc00cca2e68b3857677f030fb37ba3cd9530b33f706a523c85625cfcf1121613353d392bb11ca5e841c72f7baec04ab1b7",
+                "@rolldown/binding-darwin-x64@npm:1.2.9": "2c6af58173c4177145db94fc210e56c32f20255ebe6df782647e39fc4811071d03e7a25b52412ffa24bc67178c800af53fbadce92f3dfd62da901672e46c9c19",
+                "@rolldown/binding-freebsd-x64@npm:1.2.9": "d6c2a208797defebe61e56b1a462a6bef90200253950f9b24f970b93cf91f7b3b0d591f5cf5f4426079cf5c9a6e5051a20d789ae2b837b1c680c2c47260aec4a",
+                "@rolldown/binding-linux-arm-gnueabihf@npm:1.2.9": "99a39c7958ef1a7ba6764b288f2d9295a682d38d280ceb401165643c83c659db766ce1185d86646c84396a9acfad25b48c7e11302adc8cd53bf629c106b45a26",
+                "@rolldown/binding-linux-arm64-gnu@npm:1.2.9": "9e84c6c18dde65e53fa4e8aba5d4855806b423df2453b28bc8dd15f0e48c46b7b1cd3c9992a9b88e173efca5f12283f1650468a327fe5dee968d2b1187ea66aa",
+                "@rolldown/binding-linux-arm64-musl@npm:1.2.9": "7fedfcaaac962bec943e7b4da51b176aadd02631d1fcaf4880ae72365d4d868f409799cbe3f7025672bb2007a0004dd33729d986404ac1c7cc8b88215716adc2",
+                "@rolldown/binding-linux-ppc64-gnu@npm:1.2.9": "dcd54975afc4f736e2b736a37158bb8eeadc58801fb40c0f3bf177d504fcea455209dd527151da7ffc818ae83327017cbd8549aee5d1eb07286049a652d79503",
+                "@rolldown/binding-linux-s390x-gnu@npm:1.2.9": "a3187e4309c9a3765f83e92e099baaf978581351d9e14f9ba6cd087ceb71010c9d807c08649ddfdffc0d93ac4530abdcbfa2611cb00198fa49a1fe16ba706d7e",
+                "@rolldown/binding-linux-x64-gnu@npm:1.2.9": "9fed0b83539a4e7d9ddc84d2a43194f4d3f697649a0856f342f947291ba21e7730f89f333960f0229e559f75cf752a4ea4632060b448f7a405602dd216d5035d",
+                "@rolldown/binding-linux-x64-musl@npm:1.2.9": "f8fa1d238157f5c397a8426696d2907f846e3c38e9dc4eadd2d841f84cda5966c3975864cd460c3ce3a0564ab212e329cfe923d911177efe14aef612a8174c26",
+                "@rolldown/binding-openharmony-arm64@npm:1.2.9": "13ac71327a28246eb9c38b458617d01ed93835ff8e17122606e718fc06e99fba4805e051b8d3786f0674ed95c0a98ec79431144e72d7452942dc17d8af4a14fc",
+                "@rolldown/binding-win32-arm64-msvc@npm:1.2.9": "a2f65e085ab4c6859361b97120a8298d2edeed0650ea6f3f70cb2a1e81f0b7f4ae7a0cb002af68d68c24f0706a9a3d55fdd8d4d96d4e8f7d5b73711abdf6e5d9",
+                "@rolldown/binding-win32-x64-msvc@npm:1.2.9": "6a8c186b5b9b9031bb870470f5da7fd4c9272c0e8602ceb77b6a0da78c46f82b4be6e9c34fc3723211d229e13f92d7bb30523f8195715299cee23fcf5dbd18e2",
+                "lightningcss-android-arm64@npm:1.33.0": "46c40a0474a7a9ddcdc33e0ea634912894a9360b6ba6f2bc42f1a817d16992784d2fe6f421d293a90ea94fb481503e27fdc54f0540de0b41d7028fe9e9c9e56a",
+                "lightningcss-darwin-arm64@npm:1.33.0": "398b770e33f66db9e4c14e4a45d0e93fa59644bd29ce5082de79ee9560a5946321ac55e896aa7fb3f177d218bef3f2dca530e209a857f0f066bf3296f5dc0742",
+                "lightningcss-darwin-x64@npm:1.33.0": "132bdab8f7b66dc99730f1ccfcb882880e411420e3f9ca764c348c686112d75962d5d7e928f3bbce7088c1be168d00ea8d722fd909033b807eef191b5a2832c0",
+                "lightningcss-freebsd-x64@npm:1.33.0": "05001395776e994ea1254dcc2613f06b44458ba33769e3a1679a0f577e43632af378cc1582f3bd1cb36e480d237066a371bc04233d6c84f8e2fe9979ab4a4032",
+                "lightningcss-linux-arm-gnueabihf@npm:1.33.0": "d0f6d993846992cf6db80f2992d0b89ffddd65a8260bbe6a1534bde28510bcfa214e8831df9ccfef5ede006a6368de1649e1d96a3e122169286647b704e08f5f",
+                "lightningcss-linux-arm64-gnu@npm:1.33.0": "278a5c553e15ed7645d3e83a3b1515060e98a8742b7008af28d610d6495a09368e73ed8b90bcb537b37249bfc2446ef5b9614b3626222f25153c538909488548",
+                "lightningcss-linux-arm64-musl@npm:1.33.0": "7aa2a2ef42e8c713e6e8eb947bf64d5272c6fdbfca7b4eb3adde555357652be27cc0d84d6fef6266543c2d303943a4c4472679d1e258458119b159f0ca868ffe",
+                "lightningcss-linux-x64-gnu@npm:1.33.0": "fa57a09af3340dc5f11fdbff820fbb7b08e306e69350a500b523c88f54c1e3a40b3785fed6043d69e2e18bacd4b72410518c9b817ee987c704a80851d9201e45",
+                "lightningcss-linux-x64-musl@npm:1.33.0": "4b0cad846f8fbe4ec321a45ef9c0d02cf4277980ac34dcfc7b422b34381e7cb11512819401b01bf029d10aa0fb8a35906ce850ba38d9f43605917ccc9b0b5d4a",
+                "lightningcss-win32-arm64-msvc@npm:1.33.0": "5e4b58d7a41fe3c37ce2af7b1a95c3722a6064a84fb6286ba2cf1106651223403b5a5863ecd3eb8fb9732480e612e30d786b859329391b0197dffc88ca18c953",
+                "lightningcss-win32-x64-msvc@npm:1.33.0": "7beb4c8580f9ea45fea6d92a8de42f706c4935b2ca68f4f5163a2bd9f6ed1574f7e53686e4927883078b07a4063a9fffdc4b41968568354259066c7a70c156a4"
            }
        },
        "modules": "148",
-        "node": "24.20.0",
-        "version": "43.6.0"
+        "node": "24.21.0",
+        "version": "43.7.7"
    },
    "44": {
-        "chrome": "152.0.7977.78",
+        "chrome": "152.0.7977.130",
        "chromium": {
            "deps": {
                "gn": {
@@ -2853,15 +2905,15 @@
                    "version": "0-unstable-2026-07-23"
                }
            },
-            "version": "152.0.7977.78"
+            "version": "152.0.7977.130"
        },
        "chromium_npm_hash": "sha256-pF0JtwFpPC4/fodbhSJnQKkczA9WlDg4VqEAy9aDVLg=",
        "deps": {
            "src": {
                "args": {
-                    "hash": "sha256-+++z44EqfZH44EKiaqChyFAwRtkJaS/fdydjE+Hktco=",
+                    "hash": "sha256-I0LvCx4iUpbruXGa8kbyOEgQq4sInyyF+ozfDbAp5UQ=",
                    "postFetch": "rm -rf $(find $out/third_party/blink/web_tests ! -name BUILD.gn -mindepth 1 -maxdepth 1); rm -r $out/content/test/data; rm -rf $out/courgette/testdata; rm -r $out/extensions/test/data; rm -r $out/media/test/data; ",
-                    "tag": "152.0.7977.78",
+                    "tag": "152.0.7977.130",
                    "url": "https://chromium.googlesource.com/chromium/src.git"
                },
                "fetcher": "fetchFromGitiles"
@@ -2908,10 +2960,10 @@
            },
            "src/electron": {
                "args": {
-                    "hash": "sha256-Gu54g5p/RZGZXsMSK8yKGoT5xYTK5zvBrM69AEQjwb0=",
+                    "hash": "sha256-qipLsjTjdjS/NYWXMnFGz2RI7yzFuIdtqJuX6mC2QPY=",
                    "owner": "electron",
                    "repo": "electron",
-                    "tag": "v44.3.0"
+                    "tag": "v44.5.1"
                },
                "fetcher": "fetchFromGitHub"
            },
@@ -2941,8 +2993,8 @@
            },
            "src/third_party/angle": {
                "args": {
-                    "hash": "sha256-3ZCIFT7j944HWPOiADQa88TQZctLej5vbrBFA/FwyHw=",
-                    "rev": "736ed80c7552a4b267bd54a282b971aa4555cb3e",
+                    "hash": "sha256-rEp5z7bjis6rBrS4vWJgjZj1+/sKu8ver/1BzaZy7eA=",
+                    "rev": "616f6f041eac83bc09e107dc9af7230e0c10cf52",
                    "url": "https://chromium.googlesource.com/angle/angle.git"
                },
                "fetcher": "fetchFromGitiles"
@@ -3261,10 +3313,10 @@
            },
            "src/third_party/electron_node": {
                "args": {
-                    "hash": "sha256-X7aZh0QOm79anmh77QRiHGRSi8TERuWnWXrcPqDYPjY=",
+                    "hash": "sha256-D0Emw+F+8fz41onhxfiCQuxEQx+4jjsT7Ym2mqrKkRI=",
                    "owner": "nodejs",
                    "repo": "node",
-                    "tag": "v24.20.0"
+                    "tag": "v24.21.0"
                },
                "fetcher": "fetchFromGitHub"
            },
@@ -3840,8 +3892,8 @@
            },
            "src/third_party/pthreadpool/src": {
                "args": {
-                    "hash": "sha256-4EHJzZT+Gbhs8SkOhjSvDIPEqIQU93oJmtF3c/T+qjw=",
-                    "rev": "02460584c6092e527c8b89f7df4de143d70e801f",
+                    "hash": "sha256-YJD9n8cxoqTrTQJHKuZFW2qnlNcNmh5rQlBpnlF46to=",
+                    "rev": "15a6644ba1c45f1acc16ac1e883efc3e56c6bed2",
                    "url": "https://chromium.googlesource.com/external/github.com/google/pthreadpool.git"
                },
                "fetcher": "fetchFromGitiles"
@@ -3920,8 +3972,8 @@
            },
            "src/third_party/skia": {
                "args": {
-                    "hash": "sha256-sun/P/JVhTKfRwmVK5dgnz8UZEFnQoyXZZS6PN5z9us=",
-                    "rev": "b6d106297ff9ef2ff8094033695d045e87775581",
+                    "hash": "sha256-n++JuZJUJgALhCXjYNXcqHIKjDnHz+m5t3y8ghU9P4U=",
+                    "rev": "e8efd15f214a4d59b427f55f7769b6dbbb09bbcc",
                    "url": "https://skia.googlesource.com/skia.git"
                },
                "fetcher": "fetchFromGitiles"
@@ -4243,15 +4295,15 @@
            },
            "src/v8": {
                "args": {
-                    "hash": "sha256-ZHEmeSe8r226gjazm91GYqlfbM9a5yi8KnFv4iAWFKE=",
-                    "rev": "3de6ffffbfdcf265e9f11a5c9d1cfb4d486d7550",
+                    "hash": "sha256-HtR74oqywVwpqDAw6U6wLj0Q8t8WlRhcuEeEwoiPfX4=",
+                    "rev": "fedd021b538607860f9c56e5c193ad8dcd4f2bb1",
                    "url": "https://chromium.googlesource.com/v8/v8.git"
                },
                "fetcher": "fetchFromGitiles"
            }
        },
        "electron_yarn_data": {
-            "hash": "sha256-/Se92a1Gw8vT3J1IkAcQmd4wYb3zwh+2LdrA5MwWHy8=",
+            "hash": "sha256-Qhuv4eunoVjXQks72J4+bw/y7VoYvegUDziJkHDOnfM=",
            "missing_hashes": {
                "@oxfmt/binding-android-arm-eabi@npm:0.42.0": "42c08d87ce491086843070241f8777fa2cb968f4a08f67b3f6c33a8f67e0b3eac50eae146daede743e90e3bc32326951c5188814eea02e9c3e4a9764a4b492ba",
                "@oxfmt/binding-android-arm64@npm:0.42.0": "73e6609498d05c655c6a435af9f3e4f341137c260c7ae27fbb0377573574ca5200bd9f187aa90d442879733bbd0c4e91ae023c3b4579c9a57413a0b2922c023a",
@@ -4272,29 +4324,55 @@
                "@oxfmt/binding-win32-arm64-msvc@npm:0.42.0": "04bd529ea236c23d8dc73d95acd365612ab489b0e6a4bdd976302b933b92dcc11d4d1629e2294036f16c1e1f5120140547f65060a9e2dc8adbb21f790e2eca39",
                "@oxfmt/binding-win32-ia32-msvc@npm:0.42.0": "9775afa164de049416abf481f062b8c670cd27a70d82a0868fa61749f741e777a76eb0a57a9ef276f158a35741d90a856a492777a0a9f17c9ac01ead32935fe3",
                "@oxfmt/binding-win32-x64-msvc@npm:0.42.0": "5c38197ac6f874c2622b68a531b9fc9a221de05aa09c40717bba775f658680ebf964db7aa41c12271f90261bf50713cd4ebb2c10f12bf33cf2103fb9d67a88bb",
-                "@oxlint/binding-android-arm-eabi@npm:1.57.0": "3860b1c5a2096817da9c18cbbc24f8b56f4b6b0cefdea19e0cc0f278055aac85d891fa9d70e02f551532bf45f6a79bb3ebc63d1c2e1dff724134a9bc398f8060",
-                "@oxlint/binding-android-arm64@npm:1.57.0": "fb40a768d5608e9b41c35f16cac2e57571cbcbf1b872bc145f60a7e1fd7a478c3806e3a330579e167f8877411fe362561a103976e41cbd1e46fb02d7d0d97611",
-                "@oxlint/binding-darwin-arm64@npm:1.57.0": "fd75b91d3db274782afec0b1dee319a01b864f11e0a4af1808de23762403000d13f7921c7889302c75d945b09005a44cdf17e3ad345c1ef2842403ac28f0dfb0",
-                "@oxlint/binding-darwin-x64@npm:1.57.0": "75e2e5423ccc82f61def946317c774f951e0a1443cd9c4c1550e0941da9a645a7acd3ed344c65b50288d4842a3a523a6cd9838a28d452d20c7a041fd1b15fe3a",
-                "@oxlint/binding-freebsd-x64@npm:1.57.0": "ad0f737171b8d60a1bcfeeb1736f0ecb751ebbfd915ad7e27d5ad25a858419be541a0854fc573be01752def42b9a3864d0aa11176b574571bb44350307ad2f59",
-                "@oxlint/binding-linux-arm-gnueabihf@npm:1.57.0": "a912a546bab5831bb5ae6e697e67b33f86fc48caaf1615df9ff3234818299845cf27dacecbe17ec679a757eb6354e5e15002c632ba43f76fc890060bebd45d1b",
-                "@oxlint/binding-linux-arm-musleabihf@npm:1.57.0": "e15e5c951193afd936f155db38b9dd48f9cf0e7de8eaf07acf957c4b5b47e79c2f668d4c47310bf28efb2af5640a5a7d3d6700c723c748efefa7e72c8660b1a3",
-                "@oxlint/binding-linux-arm64-gnu@npm:1.57.0": "c167c4bcfe4067703c626264b973dd2195192615aa4bb1ef07d918c8cd128cb1d3504ba991dbd78daee29e6bf5997704c87004e93a379231377c7f7b5c505e55",
-                "@oxlint/binding-linux-arm64-musl@npm:1.57.0": "d0a60e2aa7d491baf85450fb9c0053598da5cc884b9b4e0ed557baa813bcead8e9470259c5f390e412ba173932a0b2703f0b17b06b494ce480fc25ded8074461",
-                "@oxlint/binding-linux-ppc64-gnu@npm:1.57.0": "7798e0a7e8c71f6f3e2f495fdf1109f08d4c2a7357fa19c7f9111b9510f1417175afb00845e39692e5fa4b510cc56d3e8f76bf3f0372f651d19d587b623cdab8",
-                "@oxlint/binding-linux-riscv64-gnu@npm:1.57.0": "8cc0cb3eaf2ff0716e52ce8743e5cc7e952b25150a5e75fcb9b5d7a4f82a99295ce7a3ca9a0bf6694e917c629621e01e465d816379acb264c5f2f4e860d44e24",
-                "@oxlint/binding-linux-riscv64-musl@npm:1.57.0": "1de23e270049060ef5cc1824de2aafbd7129d07c13052c109bd7de62f8bf29ab91bbcf8c15cbbc6ba6aa382b90e1bae456d5160bc8518adb7973cdcd99625127",
-                "@oxlint/binding-linux-s390x-gnu@npm:1.57.0": "35791cd14a661de5605587c81b5f4d9715de92a2f888b4e5fb1ea85626b59c1b53306feadd9020652598e0ff7db8ec31d0d43f8e647a8e1c38361d1bfdc5f288",
-                "@oxlint/binding-linux-x64-gnu@npm:1.57.0": "a55364f9d86efa12f38c54f01b02d1310600245a10cdd27a1ec9b0bfc98522a686feb6b15b1a2ef70c7676eb7b3dc7efa5e2e252313496fc910be368d4c05ee3",
-                "@oxlint/binding-linux-x64-musl@npm:1.57.0": "f6862ffcbd14261528f9a3237d8f52752b745822b54d1c4c6c937830e3712e7b2b8d00aa07838bfc7024f2648d9f3b85c3fa05f6a78c40b5f259e618dbfbeb68",
-                "@oxlint/binding-openharmony-arm64@npm:1.57.0": "1420c753028b583ce4ea00edb14f47def68d675492ef8611e98ffe0cf0a0749cc368b8619d4760d38e02c15b06bda32eafce907f6bcefa997db4fbff3a900be7",
-                "@oxlint/binding-win32-arm64-msvc@npm:1.57.0": "2bb5a9f09e1f95e7bf4a9f76af29ba7623d3a83f35e9201cd2f45375ae891c77ddb87a09dcbf2f2416fd3d6e24f34582618da307ed65f8435b943672cb8be5aa",
-                "@oxlint/binding-win32-ia32-msvc@npm:1.57.0": "a2f8f3387866a6d371c50ec4d3aa2043e420bfe1cd523053083f68a33ee651fc9948485060b4e8827d603695b04d492cfa5ef8cdd1fb760cc34dd7674fe13a0b",
-                "@oxlint/binding-win32-x64-msvc@npm:1.57.0": "380591b6937dc483e2db3edf5ace4aa48a06d1d17d419ded224df8465b20840fea8f9d1b1aef38dfa89622eb9d7991592d80b15ceb871b5c09ef9b85197c0de4"
+                "@oxlint/binding-android-arm-eabi@npm:1.80.0": "6690105857699fc8033aea03e715367cbe9a09bf5b0a32d5d5861f4ba464b0e6c1d3ef6aa773536b55b4076330eca29ce84585647c0986ac6721004ca1b3e14a",
+                "@oxlint/binding-android-arm64@npm:1.80.0": "27dde08264c5009c0d18cb796a81b9e9799f5d6419431d886775afb542dfe2e713f1640d6480d87e15835c0a4e93596cc799d1e57dd751c5dffdba4f546ea6a9",
+                "@oxlint/binding-darwin-arm64@npm:1.80.0": "343de7feb3a6fd0075c2d5c42b45657f5f303050028256aa1844069e746d0e10153e8b400e5c4f5198efd50cd4d9fa061239e05a75ca2c7906d213e418b3f2ce",
+                "@oxlint/binding-darwin-x64@npm:1.80.0": "f0cc2dd50265e6fd72fa56cc1df681c059db86945b372583667228eaa4edafb253e7c5b1f2357068f8b4587821120ee455fa9b05110fe2b1316468d226be5d94",
+                "@oxlint/binding-freebsd-x64@npm:1.80.0": "e7760e89718a9ab68329197b1f069aef1777a519c29a34ebbe9cb18bf53b87298ccbd7862952044bf1a4f208831b20286b3155fdf832adbb96394a91eec52f72",
+                "@oxlint/binding-linux-arm-gnueabihf@npm:1.80.0": "841422193752bd08fa1fde471737d47c6fcbfd8a1156df250df11e6f2305a08f932bc3760b556588bf62dfe96f536e254c336c095fd6a9693b24e8bc2510d855",
+                "@oxlint/binding-linux-arm-musleabihf@npm:1.80.0": "d39330ec7a16425f91e45fc5cbf1a9d700bb49fe2357d55f62e6beb268dc083f6ec10a19b51f2b00f0c91ad7a8a208a08080f419c00ab08086b051a0fa89d222",
+                "@oxlint/binding-linux-arm64-gnu@npm:1.80.0": "f5a741fd67343395b708d356f13c2465c7a23aeb68560e464059c0042c6dc44e35d760917991dc6ad20388ea2a8acb27b841dd76a1597cdfb9c5fa6e412120d8",
+                "@oxlint/binding-linux-arm64-musl@npm:1.80.0": "d389e4b7941dda900740bacb5801b45396ccaef3c6663b771510ab34fbb25257c792cbddcbeedb6b448e282b850154d61d5d461e4e5aebc80441225de249da8b",
+                "@oxlint/binding-linux-ppc64-gnu@npm:1.80.0": "0d977dd5ab49dd6f0c16e97a03fad5a0e8cdd71958d9002a048af865be889164f210c17f5eaa027e2ee37fa88c2813024d321fe1813d3da030067ac9e399a0b9",
+                "@oxlint/binding-linux-riscv64-gnu@npm:1.80.0": "32b244b36684228bcd05ce2bba13f9aa664737d3cbded21c730cbf96ef009f671b5a4bb2e094602dee132817645e2bda707b360ce860a70f86091cade07a7000",
+                "@oxlint/binding-linux-riscv64-musl@npm:1.80.0": "ef69cb63cba96eb8e8e8b5e3d69b40b7844d8aa02da1ade86d0e8539ba97674bf06f823407cdfa374d080a7e203f7241335de6b8f7b71da8e2665beb00f55d70",
+                "@oxlint/binding-linux-s390x-gnu@npm:1.80.0": "48f534815cc223bcd05f3137e03e7c468a630d3e97e5117de49f6a076933cac1cf4c7257651bddd9d51a1b4e6c561ed9e7e2e83f1f2616729fe8af7d15f0561b",
+                "@oxlint/binding-linux-x64-gnu@npm:1.80.0": "a447c6bdd20455f32d523a3ae65056b2e12bbee00513e24c271848b424c7d6674e02308a3693f9eb2ad908d2488e4e7204526316d268b6b3596169ab7a66ed74",
+                "@oxlint/binding-linux-x64-musl@npm:1.80.0": "91be32c8805673effe38c10a01d2b9ba47d60829518e36e52598b9844d3fc7a113aefc693c89b14b3677f3b6362ec0972432bc3ca6d76f2eb41e2b1ffdf2af03",
+                "@oxlint/binding-openharmony-arm64@npm:1.80.0": "bb0ff9049618975e88527e5555c6280a4a8019f1ee55e3612f78abcd8ab4129387bd0418c31cfa23885ed2c2338338eb0ef20b3957784340f6d0da73abda2be3",
+                "@oxlint/binding-win32-arm64-msvc@npm:1.80.0": "2a6b5c45c3acd571fff66ae27f445acef72f0c7c6227fe73f85977822403cd02b068ccc53e66b5c5723e4be523ec7ebcfcaee02a83aef514eb9a8d61ea9d4053",
+                "@oxlint/binding-win32-ia32-msvc@npm:1.80.0": "1c68fbcb8f1d34c51458c84b03266b8f1f54fc923a805442657b433a10828625bdd0e04678aafec985396bc1431ce02fb607a1f502831aa184a16d714a75443b",
+                "@oxlint/binding-win32-x64-msvc@npm:1.80.0": "d5ffb6399f5b654105b74a1adbc13d820cba5a631813cba85f2c14e8da4b72b13d518aef261a6a81b99fc4430520d3ad1b48e5ebcdb7d0eb652cc94f5a5b8da4",
+                "@rolldown/binding-android-arm-eabi@npm:1.2.9": "1ce723761c6f6909e9f7657f3d0c157d11ab0397662679cecc46f87a5493754b05a5eacbbff8c0f21ca9f6bf6f18afb7914999e85dad926852ff6e63f98985ba",
+                "@rolldown/binding-android-arm64@npm:1.2.9": "1d597c83de815f2cb2375b8c6bb291ba34fdb6cc4fbbe7ad109f0b6a41d7434f5072655b143349ec81c9bd765f130475b0895d6d0fbf5addb51a0016aa8de015",
+                "@rolldown/binding-darwin-arm64@npm:1.2.9": "9be017bac93b93c0d4211cc87180a6cc00cca2e68b3857677f030fb37ba3cd9530b33f706a523c85625cfcf1121613353d392bb11ca5e841c72f7baec04ab1b7",
+                "@rolldown/binding-darwin-x64@npm:1.2.9": "2c6af58173c4177145db94fc210e56c32f20255ebe6df782647e39fc4811071d03e7a25b52412ffa24bc67178c800af53fbadce92f3dfd62da901672e46c9c19",
+                "@rolldown/binding-freebsd-x64@npm:1.2.9": "d6c2a208797defebe61e56b1a462a6bef90200253950f9b24f970b93cf91f7b3b0d591f5cf5f4426079cf5c9a6e5051a20d789ae2b837b1c680c2c47260aec4a",
+                "@rolldown/binding-linux-arm-gnueabihf@npm:1.2.9": "99a39c7958ef1a7ba6764b288f2d9295a682d38d280ceb401165643c83c659db766ce1185d86646c84396a9acfad25b48c7e11302adc8cd53bf629c106b45a26",
+                "@rolldown/binding-linux-arm64-gnu@npm:1.2.9": "9e84c6c18dde65e53fa4e8aba5d4855806b423df2453b28bc8dd15f0e48c46b7b1cd3c9992a9b88e173efca5f12283f1650468a327fe5dee968d2b1187ea66aa",
+                "@rolldown/binding-linux-arm64-musl@npm:1.2.9": "7fedfcaaac962bec943e7b4da51b176aadd02631d1fcaf4880ae72365d4d868f409799cbe3f7025672bb2007a0004dd33729d986404ac1c7cc8b88215716adc2",
+                "@rolldown/binding-linux-ppc64-gnu@npm:1.2.9": "dcd54975afc4f736e2b736a37158bb8eeadc58801fb40c0f3bf177d504fcea455209dd527151da7ffc818ae83327017cbd8549aee5d1eb07286049a652d79503",
+                "@rolldown/binding-linux-s390x-gnu@npm:1.2.9": "a3187e4309c9a3765f83e92e099baaf978581351d9e14f9ba6cd087ceb71010c9d807c08649ddfdffc0d93ac4530abdcbfa2611cb00198fa49a1fe16ba706d7e",
+                "@rolldown/binding-linux-x64-gnu@npm:1.2.9": "9fed0b83539a4e7d9ddc84d2a43194f4d3f697649a0856f342f947291ba21e7730f89f333960f0229e559f75cf752a4ea4632060b448f7a405602dd216d5035d",
+                "@rolldown/binding-linux-x64-musl@npm:1.2.9": "f8fa1d238157f5c397a8426696d2907f846e3c38e9dc4eadd2d841f84cda5966c3975864cd460c3ce3a0564ab212e329cfe923d911177efe14aef612a8174c26",
+                "@rolldown/binding-openharmony-arm64@npm:1.2.9": "13ac71327a28246eb9c38b458617d01ed93835ff8e17122606e718fc06e99fba4805e051b8d3786f0674ed95c0a98ec79431144e72d7452942dc17d8af4a14fc",
+                "@rolldown/binding-win32-arm64-msvc@npm:1.2.9": "a2f65e085ab4c6859361b97120a8298d2edeed0650ea6f3f70cb2a1e81f0b7f4ae7a0cb002af68d68c24f0706a9a3d55fdd8d4d96d4e8f7d5b73711abdf6e5d9",
+                "@rolldown/binding-win32-x64-msvc@npm:1.2.9": "6a8c186b5b9b9031bb870470f5da7fd4c9272c0e8602ceb77b6a0da78c46f82b4be6e9c34fc3723211d229e13f92d7bb30523f8195715299cee23fcf5dbd18e2",
+                "lightningcss-android-arm64@npm:1.33.0": "46c40a0474a7a9ddcdc33e0ea634912894a9360b6ba6f2bc42f1a817d16992784d2fe6f421d293a90ea94fb481503e27fdc54f0540de0b41d7028fe9e9c9e56a",
+                "lightningcss-darwin-arm64@npm:1.33.0": "398b770e33f66db9e4c14e4a45d0e93fa59644bd29ce5082de79ee9560a5946321ac55e896aa7fb3f177d218bef3f2dca530e209a857f0f066bf3296f5dc0742",
+                "lightningcss-darwin-x64@npm:1.33.0": "132bdab8f7b66dc99730f1ccfcb882880e411420e3f9ca764c348c686112d75962d5d7e928f3bbce7088c1be168d00ea8d722fd909033b807eef191b5a2832c0",
+                "lightningcss-freebsd-x64@npm:1.33.0": "05001395776e994ea1254dcc2613f06b44458ba33769e3a1679a0f577e43632af378cc1582f3bd1cb36e480d237066a371bc04233d6c84f8e2fe9979ab4a4032",
+                "lightningcss-linux-arm-gnueabihf@npm:1.33.0": "d0f6d993846992cf6db80f2992d0b89ffddd65a8260bbe6a1534bde28510bcfa214e8831df9ccfef5ede006a6368de1649e1d96a3e122169286647b704e08f5f",
+                "lightningcss-linux-arm64-gnu@npm:1.33.0": "278a5c553e15ed7645d3e83a3b1515060e98a8742b7008af28d610d6495a09368e73ed8b90bcb537b37249bfc2446ef5b9614b3626222f25153c538909488548",
+                "lightningcss-linux-arm64-musl@npm:1.33.0": "7aa2a2ef42e8c713e6e8eb947bf64d5272c6fdbfca7b4eb3adde555357652be27cc0d84d6fef6266543c2d303943a4c4472679d1e258458119b159f0ca868ffe",
+                "lightningcss-linux-x64-gnu@npm:1.33.0": "fa57a09af3340dc5f11fdbff820fbb7b08e306e69350a500b523c88f54c1e3a40b3785fed6043d69e2e18bacd4b72410518c9b817ee987c704a80851d9201e45",
+                "lightningcss-linux-x64-musl@npm:1.33.0": "4b0cad846f8fbe4ec321a45ef9c0d02cf4277980ac34dcfc7b422b34381e7cb11512819401b01bf029d10aa0fb8a35906ce850ba38d9f43605917ccc9b0b5d4a",
+                "lightningcss-win32-arm64-msvc@npm:1.33.0": "5e4b58d7a41fe3c37ce2af7b1a95c3722a6064a84fb6286ba2cf1106651223403b5a5863ecd3eb8fb9732480e612e30d786b859329391b0197dffc88ca18c953",
+                "lightningcss-win32-x64-msvc@npm:1.33.0": "7beb4c8580f9ea45fea6d92a8de42f706c4935b2ca68f4f5163a2bd9f6ed1574f7e53686e4927883078b07a4063a9fffdc4b41968568354259066c7a70c156a4"
            }
        },
        "modules": "149",
-        "node": "24.20.0",
-        "version": "44.3.0"
+        "node": "24.21.0",
+        "version": "44.5.1"
    }
 }
--- a/pkgs/development/tools/electron/update.py
+++ b/pkgs/development/tools/electron/update.py
@@ -118,11 +118,9 @@ def get_chromium_gn_source(chromium_tag: str) -> dict:
 def get_electron_yarn_data(electron_tag: str) -> dict:
    print(f"yarn-berry-fetcher prefetch", file=sys.stderr)
    with tempfile.TemporaryDirectory() as tmp_dir:
-        print(f"Patching yarn.lock for yarn 4.18 support", file=sys.stderr)
        yarn_lock_file=get_electron_file(electron_tag, "yarn.lock")
-        patched_yarn_lock_file=yarn_lock_file.replace('version: 8', 'version: 10', count=1)
        with open(tmp_dir + "/yarn.lock", "w") as f:
-            f.write(patched_yarn_lock_file)
+            f.write(yarn_lock_file)
        missing_hashes_str = (
            subprocess.check_output(
                ["yarn-berry-fetcher", "missing-hashes", tmp_dir + "/yarn.lock"]
--- a/pkgs/development/tools/electron/yarn-fix.patch
+++ b/pkgs/development/tools/electron/yarn-fix.patch
@@ -1,20 +0,0 @@
-diff --git a/.yarnrc.yml b/.yarnrc.yml
--- a/.yarnrc.yml
-+++ b/.yarnrc.yml
-@@ -12,5 +12,3 @@ npmPreapprovedPackages:
- httpProxy: "${HTTP_PROXY:-}"
- 
- httpsProxy: "${HTTPS_PROXY:-}"
-
-yarnPath: .yarn/releases/yarn-4.12.0.cjs
-diff --git a/yarn.lock b/yarn.lock
--- a/yarn.lock
-+++ b/yarn.lock
-@@ -2,6 +2,6 @@
- # Manual changes might be lost - proceed with caution!
- 
- __metadata:
-  version: 8
-+  version: YARN_LOCKFILE_VERSION_PLACEHOLDER
-   cacheKey: 10c0
- 
--- a/pkgs/os-specific/darwin/xcode/default.nix
+++ b/pkgs/os-specific/darwin/xcode/default.nix
@@ -135,6 +135,7 @@ lib.makeExtensible (self: {
  xcode_26_5_Apple_silicon = requireXcode "26.5_Apple_silicon" "sha256-lavdscO0z4Tyf22vV8QMooOt5yYFwnTi1oe3yA+wTdA=";
  xcode_26_6 = requireXcode "26.6_Universal" "sha256-D2xuCXVhTLJLScQ1sxaVH8nANfgkm7/+9iYdi7/FCLI=";
  xcode_26_6_Apple_silicon = requireXcode "26.6_Apple_silicon" "sha256-UOtZRrSPNhwCLGgpNJTPrdOrVKq+7UHnUJjlxakZmOA=";
+  xcode_27 = requireXcode "27" "sha256-k0YuMjPbP5Adnnx6KhQXGRi8kRLPpXJN+EUxpqYHwOE=";
  xcode =
    self."xcode_${
      lib.replaceStrings [ "." ] [ "_" ] (
--- a/pkgs/servers/home-assistant/custom-components/solis_modbus/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/solis_modbus/package.nix
@@ -10,13 +10,13 @@
 buildHomeAssistantComponent (finalAttrs: {
  owner = "Pho3niX90";
  domain = "solis_modbus";
-  version = "4.2.6";
+  version = "4.3.0";

  src = fetchFromGitHub {
    owner = "Pho3niX90";
    repo = "solis_modbus";
    tag = "v${finalAttrs.version}";
-    hash = "sha256-M8ECmFdujnlSVVWckdTEwDAWFFl9yzbTIqK9hMxClpk=";
+    hash = "sha256-mJ9v0QwP8SOfZwQW6eXoyOQfg3+Bq9B+th5FE0+Kfco=";
  };

  dependencies = [
--- a/pkgs/servers/home-assistant/custom-components/waste_collection_schedule/package.nix
+++ b/pkgs/servers/home-assistant/custom-components/waste_collection_schedule/package.nix
@@ -20,13 +20,13 @@
 buildHomeAssistantComponent rec {
  owner = "mampfes";
  domain = "waste_collection_schedule";
-  version = "2.34.2";
+  version = "2.35.0";

  src = fetchFromGitHub {
    inherit owner;
    repo = "hacs_waste_collection_schedule";
    tag = "v${version}";
-    hash = "sha256-vGsyNR04aGwj/cp4m23kg+PS5bLGgUM6jI8rhnPHJjU=";
+    hash = "sha256-e3w0RdA7Av1wULMdaxmvaivJfuW/WRTca4/YRqTIh9w=";
  };

  dependencies = [
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -3128,7 +3128,7 @@ with pkgs;
    ocamlPackages = ocaml-ng.ocamlPackages_4_14;
  };

-  inherit (coqPackages_9_0) compcert;
+  inherit (coqPackages_9_2) compcert;

  corretto11 = javaPackages.compiler.corretto11;
  corretto17 = javaPackages.compiler.corretto17;
--- a/pkgs/top-level/coq-packages.nix
+++ b/pkgs/top-level/coq-packages.nix
@@ -263,6 +263,10 @@ let
            version =
              with lib.versions;
              lib.switch self.coq.version [
+                {
+                  case = range "8.19" "9.0";
+                  out = "3.17";
+                }
                {
                  case = range "8.15" "8.18";
                  out = "3.13.1";
--- a/pkgs/top-level/darwin-packages.nix
+++ b/pkgs/top-level/darwin-packages.nix
@@ -143,6 +143,7 @@ makeScopeWithSplicing' {
        xcode_26_5_Apple_silicon
        xcode_26_6
        xcode_26_6_Apple_silicon
+        xcode_27
        xcode
        requireXcode
        ;
--- a/pkgs/top-level/rocq-packages.nix
+++ b/pkgs/top-level/rocq-packages.nix
@@ -259,6 +259,10 @@ let
            version =
              with lib.versions;
              lib.switch self.coq.version [
+                {
+                  case = range "8.19" "9.0";
+                  out = "3.17";
+                }
                {
                  case = range "8.15" "8.18";
                  out = "3.13.1";